Using an Extended Attack Defense Graph Model to Estimate the Risk of a Successful Attack on an IT Infrastructure
Christoph Karg, Till Hänisch · Athens Journal of Τechnology & Engineering · 2019
Nowadays, securing the IT infrastructure is an ongoing task in every company and organization.For small and medium-sized enterprises, this task is challenging because of its complexity and the related costs.Especially the risk assessment of threats and the choice of appropriate countermeasures is hard to handle by this kind of enterprises.Using the example of a ransomware attack, this paper describes how to use a method for risk assessment on the basis of attack defence graphs and Monte Carlo simulations.The details of the simulation algorithm are explained and formal aspects are considered.