The Scalability of Attacks in Attack Tree Based Risk Analysis

  • Name:

    The Scalability of Attacks in Attack Tree Based Risk Analysis

  • Venue:

    252 / BBB

  • Date:

    2025-11-18

  • Speaker:

    Eva Hetzel

  • Time:

    15:45

  • Usually, when an assumption, that we base the security of a protocol on, is broken, we consider the protocol to be insecure. To investigate the remaining security guarantees that might still hold, we introduced the notion of attack scalability. Intuitively, an attack scales well, if it is profitable after multiple attack executions in the eyes of an attacker.
    In this talk, I am going to revisit the scalability of attacks as a concept and discuss how it can be used to improve risk analysis using attack trees.