On the Soundness of Attack Trees：稳健的攻击树.pdfVIP

On the Soundness of Attack Trees B B Maxime Audinot( ) and Sophie Pinchinat( ) IRISA, Campus de Beaulieu, 35042 Rennes Cedex, France {maxime.audinot,sophie.pinchinat}@irisa.fr Abstract. We formally define three notions of soundness of an attack tree w.r.t. the system it refers to: admissibility, consistency, and com- pleteness . The system is modeled as a labeled transition sy