Modeling and quantitatively predicting software security based on stochastic Petri nets

TL;DR: This work described gating of GJs using the formalism of the stochastic automata networks (SANs), which allowed for very efficient building and storing of infinitesimal generator of the CTMC that allowed to produce matrices of the models containing a distinct block structure.

TL;DR: With this research more complex software could be simplified and reliability of the software could be evaluated effectively, and by means of reliability prediction of the whole software, CRMPN is introduced.

TL;DR: The goal in this paper is to map CRC cards into stochastic petri net for evaluating and analyzing quality parameter of security.

TL;DR: The proposed DTMC technique proves to have improved results using stochastic modeling, which can be used for attack process modeling by dependability evaluation and to determine the security metrics, such as steady-state security and mean time to security failure quantitatively.

TL;DR: CPN Tools is a tool for editing, simulating and analysing Coloured Petri Nets, which is based on advanced interaction techniques, such as toolglasses, marking menus, and bi-manual interaction.

TL;DR: This paper deals with various issues related to quantifying the security attributes of an intrusion tolerant system, such as the SITAR system, which is modeled as a random process and compute a security measure called the "mean time (or effort) to security failure" (MTTSF) and also compute probabilities of security failure due to violations of different security attributes.

TL;DR: An overview of the existing research in this area, critically examine its limitations, and suggest ways to address the identified limitations can be found in this article, where the authors provide an overview of their work.