A bottom-up approach to creating a cyberattack model with fine grain components

Abstract

In today's world every system developer and administrator should be familiar with cyberattacks and possible threats to their organizations systems. Petri Nets have been used to model and simulate cyberattacks allowing for additional knowledge on the planning stages of defending a system. Petri Nets have been used since the 1960's and there exists several extensions and variations of how they are designed, in particular Petri Nets with Players, Strategies and Cost has been recently proposed to model individual cyberattacks on target systems. These models can also be broken down into smaller components to build different models. This study introduces the concept of fine-grain components and a bottom-up approach to create a cyberattack model.