pwnPr3d: An Attack-Graph-Driven Probabilistic Threat-Modeling Approach
Pontus Johnson, Alexandre Vernotte, Mathias Ekstedt, Robert Lagerström · 2016
In this paper we introduce pwnPr3d, a probabilistic threat modeling approach for automatic attack graph generation based on network modeling. The aim is to provide stakeholders in organizations with a holistic approach that both provides high-level overview and technical details. Unlike many other threat modeling and attack graph approaches that rely heavily on manual work and security expertise, our language comes with built-in security analysis capabilities. pwnPr3d generates probability distributions over the time to compromise assets.