| bio | website | |
|---|---|---|
| location | ||
| age | ||
| visits | member for | 1 year, 1 month |
| seen | Jun 13 at 12:37 | |
| stats | profile views | 9 |
|
Dec 20 |
awarded | Supporter |
|
May 25 |
comment |
Example of attack trees in the web application security analysis Yes I already had a look to the WebGoat project, however, if I'm not wrong, it shows you single attacks and explains how to exploit them. Which is useful, yes, but starting just from single attacks and without experience is very difficult for me to combine all those exploit together in order to perform complex attacks which can be represented with attack trees. This is why I'm looking for informations \ examples about web app attacks. I'm not looking to an already built tree. As you said, the formalisms are not hard to apply. I'm looking to, lets say, "descriptions" about complex attacks. |
|
May 24 |
asked | Example of attack trees in the web application security analysis |
|
May 9 |
awarded | Student |
|
Apr 25 |
comment |
How to use attack trees and attack graphs I wasn't sure I got the point. The first paper makes me confused about the usefulness of attack graph since, in my opinion, is too limited. Do you know if there is a way to automatically generate attack graphs\trees in a "more abstract" form? |
|
Apr 25 |
asked | How to use attack trees and attack graphs |