Modeling and Verification of Complex Network Attacks Using an Actor-Based Language *
Hamid Reza Shahriari, Mohammad Sadegh Makarem, Marjan Sirjani, Rasool Jalili, Ali Movaghar · 2006
Increasing use of networks and their complexity have complicated the task of security analysis. Accordingly, automatic verification approaches have received more attention recently. In this paper, we showed how an attacker might combine simple attacks to construct a complex multiphase attack. We use Rebeca language to model the network of hosts and its model checker to find counter-examples as violation of security policies. Some simple attacks have been modeled in previous works in this area. First, we show these simple attacks in our model and then verify the model to find more complex attacks. These complex attacks may include some simpler attacks as their steps. We choose Rebeca because of its powerful yet simple actor-based paradigm in modeling concurrent and distributed systems.