An Automated, End-to-End Framework for Modeling Attacks From Vulnerability Descriptions

Understand

Attack graphs are one of the main techniques used to automate the risk assessment process.

• In order to derive a relevant attack graph, up-to-date information on known attack techniques should be represented as interaction rules.
• Designing and creating new interaction rules is not a trivial task and currently performed manually by security experts.
• However, since the number of new security vulnerabilities and attack techniques continuously and rapidly grows, there is a need to frequently update the rule set of attack graph tools with new attack techniques to ensure that the set of interaction rules is always up-to-date.