Quantitative Security Risk Modeling and Analysis with RisQFLan

Domain-specific quantitative modeling and analysis approaches are fundamental in scenarios which qualitative inappropriate or unfeasible. In this paper, we present a tool-supported approach to graph-based security risk based on attack-defense trees. Our is QFLan, successful domain-specific support of highly configurable systems, whose components have been decoupled facilitate the instantiation QFLan domain analysis. incorporates distinctive features from three popular kinds attack trees, namely enhanced capabilities-based trees countermeasure into language. The result new framework, called RisQFLan, diagrams. By offering either exact statistical verification probabilistic scenarios, RisQFLan constitutes significant novel contribution existing toolsets that domain. We validate our by highlighting additional offered illustrative case studies seminal