Composing Cyberattacks: Sequential Composition with Communication
摘要
The rapid development of technology has established cybersecurity as a fundamental field for research and development. The use of modeling and simulation tools including Petri Nets and their extension Petri Nets with Player, Strategies, and Costs (PNPSC) are used to analyze different cyberattack scenarios. While it is easy to focus on a single cyberattack and analyze its impact on a system and organization, in today’s day and age an extensive system attack which focuses on more than a single cyberattack can be debilitating to an organization. PNPSC models have been studied to be composed together in the means of parallel compositions and sequential composition to represent a more comprehensive system attack that goes beyond a single cyberattack. This study expands on the sequential composition method. The theoretical structure of the method is discussed along with a proof of concept based on a practical walkthrough exercise.