Attack trees are a well established and commonly used framework for security modeling.
They provide a readable and structured representation of possible attacks against a system …

Timed automata are a common formalism for the verification of concurrent systems subject to
timing constraints. They extend finite-state automata with clocks, that constrain the system …

Packages in the Node. js ecosystem often suffer from serious vulnerabilities such as
arbitrary command injection and code execution. Existing taint analysis tools fall short in …

Abstract Domain-specific quantitative modeling and analysis approaches are fundamental in
scenarios in which qualitative approaches are inappropriate or unfeasible. In this paper, we …

We present a method for assisting the semi-automatic creation of attack trees. Our method
allows to explore a library of attack trees, select elements from this library that can be …

Since 2009, Moving Target Defense (MTD) has become a new paradigm of defensive
mechanism that frequently changes the state of the target system to confuse the attacker …

The cheapest attacks are often time-consuming, and those requiring high level of technical
skills might occur rarely but result in disastrous consequences. Therefore, analysis focusing …

Abstract Graphical Security Models (GSMs), such as an Attack Graph, are used to assess the
security of networks, but they are often limited to assess the security of the given network …

We propose how attack trees formalism can be extended with time constraints. An attack tree
is a basic description of how an attacker can compromise an asset, we refine this basic …

The cyberphysical system (CPS) is becoming the infrastructure of society. Unfortunately, the
CPS is vulnerable to cyberattacks, which may cause environmental pollution, property …