Methodology of iterative attack modelling in large computer networks

The article describes the basic components of the methodology of iterative attack modelling in large computer networks, which are formal model, analysis algorithms for probabilistic attack graphs and software. Formal model of iterative attack modelling process involves the process models of modelling task definition, attack model building, model execution and model result analysis. Probabilistic attack graph analysis algorithms provide calculation of security metrics and finding attack sub-graphs associated with intruder action scripts. Software tools for attack model analysis in large computer networks provide their static analysis and analysis of dynamic characteristics.