OptiTool

Introduction

The OptiTool project was made in the context of security of system, especially cybersecurity. Every system can be attacked in different ways, these attacks can be pictured as a tree called attack tree. Each node of the tree stand for an action that the attacker can perform against the system. We can associate different cost to these nodes. Therefor, the owner of this system can try to defend his system with countermeasure. In this case, we can picture the set of attacks and defenses in an attack and defense tree. This tree will be similar to the previous one, but with the addition of defense nodes. A defense node can also be countered by an attack node. An example of attack defense tree is given below :

This project follows a demand from Barbara Kordy and Wojciech Widel as they both use ADTool, a modelisation software of attack defense tree in their researches. The goal of our project is to extends ADTool’s features by adding DAG-Solver’s features in order to create OptiTool. The OptiTool’s goal is to let user make the attack defense tree corresponding to his system and then computing which counter-measure implements to obtain the optimal defense according to criteria given by users.

OptiTool aims are :

• Attack defense tree making,
• Nodes labeling with cost,
• Optimal set of counter-measures computing and displaying following the goal selected by the user and fulfilling the budget constraint.