Introducing priority into hybrid attack graphs
William J. Nichols, Peter J. Hawrylak, John C. Hale, Mauricio Papa · 2017
With the cybersecurity of critical infrastructures becoming increasingly significant, methods for testing the security of cyber-physical systems are still under development. One promising method is hybrid attack graph (HAG) analysis. HAGs extend attack graphs to model the hybrid behavior of cyber-physical systems (CPSs). Generating these graphs is computationally intensive, as the system state space is enormous, yet many states may not be physically realizable. This paper introduces the concept of priorities to hybrid attack graphs, which is designed to reduce state explosion while preserving all relevant attack paths. While designed for hybrid attack graphs, priorities can be applied to traditional attack graphs as well.