基于DAG的攻击与防御建模：不要为了攻击树而错过森林
DAG-Based Attack and Defense Modeling: Don't Miss the Forest for the Attack Trees
摘要：
本文介绍了当前的攻击和防御建模方法，是基于有向无环图（DAG）的最新状态。DAG允许将复杂的情景分层分解为简单、易于理解和可量化的行动。基于威胁树和贝叶斯网络的方法是两种著名的安全建模方法。然而，目前有30多种基于DAG的方法，每种方法都有不同的特点和目标。本调查的目的是提出一个完整的概述图形化的攻击和防御建模技术的基础上DAG。这包括总结现有的方法，比较它们的功能，并提出了所描述的形式主义的分类。本文还支持根据用户需求选择适当的建模技术。
英文摘要：
This paper presents the current state of the art on attack and defense modeling approaches that are based on directed acyclic graphs (DAGs). DAGs allow for a hierarchical decomposition of complex scenarios into simple, easily understandable and quantifiable actions. Methods based on threat trees and Bayesian networks are two well-known approaches to security modeling. However there exist more than 30 DAG-based methodologies, each having different features and goals. The objective of this survey is to present a complete overview of graphical attack and defense modeling techniques based on DAGs. This consists of summarizing the existing methodologies, comparing their features and proposing a taxonomy of the described formalisms. This article also supports the selection of an adequate modeling technique depending on user requirements.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
