Threat Modeling with Attack-Defense Trees

Details

Supervisors

Axel Legay

Faculty

Ecole polytechnique de Louvain

Degree label

Master [120] en cybersécurité, à finalité spécialisée: conception et analyse de systèmes

Abstract

Nowadays, at every level of the society, we are using tools available on the web to help us to organize our tasks in order to achieve goals. This part of our life is crucial even if the majority of the society does not realize it. Sometimes it is also mandatory to use services such as bank online, GPS, News to retrieve information and decide what would be your plan for the next few days or even more. All these operations are possible thanks to servers and online services that are often part of complex architecture. Unfortunately with the evolution of the technologies and the growing number of this kind of services, the number of threats that the information system are facing is also growing, making the confidentiality, the integrity and the availability vulnerable. The purpose of this thesis is to explore the ability to represent threat models by using the representation of a tree. Especially the representation of an Attack-Defense Tree. The Attack-Defense Tree representation has the advantage to be easily understood by anyone reading the tree, even without specific scientific or cybersecurity knowledge, even if the structure is really complex. This objective is also implemented into an application allowing the readers to use this tool explained in the thesis.