A Formal Approach to Identifying Security Vulnerabilities in Telecommunication Networks

Inna Vistbakka; Elena Troubitsyna; Linas Laibinis; Ian Oliver; Silke Holtmanns

doi:10.1007/978-3-319-47846-3_10

A Formal Approach to Identifying Security Vulnerabilities in Telecommunication Networks

Inna Vistbakka, Elena Troubitsyna, Linas Laibinis, Ian Oliver, Silke Holtmanns

Information Technology

Research output: Chapter in Book/Conference proceeding › Conference contribution › Scientific › peer-review

6 Citations (Scopus)

Abstract

The number of security attacks on the telecommunication networks is constantly increasing. To prevent them, the telecom sector is looking for new automated techniques facilitating a discovery of potential network vulnerabilities and rectification of them. In this paper, we propose an approach for identifying potential attack scenarios and defining recommendations for preventing them. The approach is formalised in the Event-B framework. It allows us to not only formalise the analysed part of the network architecture and verify consistency of the control and data flow of the associated services but also employ model checking to generate and analyse attack scenarios. By applying the proposed approach, the designers can systematically explore network vulnerabilities and propose recommendations for attack prevention.

Original language	Undefined/Unknown
Title of host publication	Formal Methods and Software Engineering 18th International Conference on Formal Engineering Methods, ICFEM 2016, Tokyo, Japan, November 14-18, 2016, Proceedings
Editors	Kazuhiro Ogata, Mark Lawford, Shaoying Liu
Publisher	Springer
Pages	141–158
ISBN (Electronic)	978-3-319-47846-3
ISBN (Print)	978-3-319-47845-6
DOIs	https://doi.org/10.1007/978-3-319-47846-3_10
Publication status	Published - 2016
MoE publication type	A4 Article in a conference publication
Event	International Conference on Formal Engineering Methods (ICFEM) - International Conference on Formal Engineering Methods -- ICFEM 2016 Duration: 14 Nov 2016 → 18 Nov 2016

Conference

Conference	International Conference on Formal Engineering Methods (ICFEM)
Period	14/11/16 → 18/11/16

Access to Document

10.1007/978-3-319-47846-3_10

Cite this

Vistbakka, I., Troubitsyna, E., Laibinis, L., Oliver, I., & Holtmanns, S. (2016). A Formal Approach to Identifying Security Vulnerabilities in Telecommunication Networks. In K. Ogata, M. Lawford, & S. Liu (Eds.), Formal Methods and Software Engineering 18th International Conference on Formal Engineering Methods, ICFEM 2016, Tokyo, Japan, November 14-18, 2016, Proceedings (pp. 141–158). Springer. https://doi.org/10.1007/978-3-319-47846-3_10

Vistbakka, Inna ; Troubitsyna, Elena ; Laibinis, Linas et al. / A Formal Approach to Identifying Security Vulnerabilities in Telecommunication Networks. Formal Methods and Software Engineering 18th International Conference on Formal Engineering Methods, ICFEM 2016, Tokyo, Japan, November 14-18, 2016, Proceedings. editor / Kazuhiro Ogata ; Mark Lawford ; Shaoying Liu. Springer, 2016. pp. 141–158

@inproceedings{d34dccde6afc4cbe8de4db8d124c420b,

title = "A Formal Approach to Identifying Security Vulnerabilities in Telecommunication Networks",

abstract = "The number of security attacks on the telecommunication networks is constantly increasing. To prevent them, the telecom sector is looking for new automated techniques facilitating a discovery of potential network vulnerabilities and rectification of them. In this paper, we propose an approach for identifying potential attack scenarios and defining recommendations for preventing them. The approach is formalised in the Event-B framework. It allows us to not only formalise the analysed part of the network architecture and verify consistency of the control and data flow of the associated services but also employ model checking to generate and analyse attack scenarios. By applying the proposed approach, the designers can systematically explore network vulnerabilities and propose recommendations for attack prevention.",

author = "Inna Vistbakka and Elena Troubitsyna and Linas Laibinis and Ian Oliver and Silke Holtmanns",

year = "2016",

doi = "10.1007/978-3-319-47846-3_10",

language = "Odefinierat/ok{\"a}nt",

isbn = "978-3-319-47845-6",

pages = "141–158",

editor = "Kazuhiro Ogata and Mark Lawford and Shaoying Liu",

booktitle = "Formal Methods and Software Engineering 18th International Conference on Formal Engineering Methods, ICFEM 2016, Tokyo, Japan, November 14-18, 2016, Proceedings",

publisher = "Springer",

note = "International Conference on Formal Engineering Methods (ICFEM) ; Conference date: 14-11-2016 Through 18-11-2016",

}

Vistbakka, I, Troubitsyna, E, Laibinis, L, Oliver, I & Holtmanns, S 2016, A Formal Approach to Identifying Security Vulnerabilities in Telecommunication Networks. in K Ogata, M Lawford & S Liu (eds), Formal Methods and Software Engineering 18th International Conference on Formal Engineering Methods, ICFEM 2016, Tokyo, Japan, November 14-18, 2016, Proceedings. Springer, pp. 141–158, International Conference on Formal Engineering Methods (ICFEM), 14/11/16. https://doi.org/10.1007/978-3-319-47846-3_10

A Formal Approach to Identifying Security Vulnerabilities in Telecommunication Networks. / Vistbakka, Inna; Troubitsyna, Elena; Laibinis, Linas et al.
Formal Methods and Software Engineering 18th International Conference on Formal Engineering Methods, ICFEM 2016, Tokyo, Japan, November 14-18, 2016, Proceedings. ed. / Kazuhiro Ogata; Mark Lawford; Shaoying Liu. Springer, 2016. p. 141–158.

Research output: Chapter in Book/Conference proceeding › Conference contribution › Scientific › peer-review

TY - GEN

T1 - A Formal Approach to Identifying Security Vulnerabilities in Telecommunication Networks

AU - Vistbakka, Inna

AU - Troubitsyna, Elena

AU - Laibinis, Linas

AU - Oliver, Ian

AU - Holtmanns, Silke

PY - 2016

Y1 - 2016

N2 - The number of security attacks on the telecommunication networks is constantly increasing. To prevent them, the telecom sector is looking for new automated techniques facilitating a discovery of potential network vulnerabilities and rectification of them. In this paper, we propose an approach for identifying potential attack scenarios and defining recommendations for preventing them. The approach is formalised in the Event-B framework. It allows us to not only formalise the analysed part of the network architecture and verify consistency of the control and data flow of the associated services but also employ model checking to generate and analyse attack scenarios. By applying the proposed approach, the designers can systematically explore network vulnerabilities and propose recommendations for attack prevention.

AB - The number of security attacks on the telecommunication networks is constantly increasing. To prevent them, the telecom sector is looking for new automated techniques facilitating a discovery of potential network vulnerabilities and rectification of them. In this paper, we propose an approach for identifying potential attack scenarios and defining recommendations for preventing them. The approach is formalised in the Event-B framework. It allows us to not only formalise the analysed part of the network architecture and verify consistency of the control and data flow of the associated services but also employ model checking to generate and analyse attack scenarios. By applying the proposed approach, the designers can systematically explore network vulnerabilities and propose recommendations for attack prevention.

U2 - 10.1007/978-3-319-47846-3_10

DO - 10.1007/978-3-319-47846-3_10

M3 - Konferensbidrag

SN - 978-3-319-47845-6

SP - 141

EP - 158

BT - Formal Methods and Software Engineering 18th International Conference on Formal Engineering Methods, ICFEM 2016, Tokyo, Japan, November 14-18, 2016, Proceedings

A2 - Ogata, Kazuhiro

A2 - Lawford, Mark

A2 - Liu, Shaoying

PB - Springer

T2 - International Conference on Formal Engineering Methods (ICFEM)

Y2 - 14 November 2016 through 18 November 2016

ER -

Vistbakka I, Troubitsyna E, Laibinis L, Oliver I, Holtmanns S. A Formal Approach to Identifying Security Vulnerabilities in Telecommunication Networks. In Ogata K, Lawford M, Liu S, editors, Formal Methods and Software Engineering 18th International Conference on Formal Engineering Methods, ICFEM 2016, Tokyo, Japan, November 14-18, 2016, Proceedings. Springer. 2016. p. 141–158 doi: 10.1007/978-3-319-47846-3_10