1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
|
<?xml version="1.0"?>
<opsa-mef>
<define-initiating-event name="Attack" event-tree="AttackTree"/>
<define-event-tree name="AttackTree">
<define-functional-event name="L1">
<label>access denied</label>
</define-functional-event>
<define-functional-event name="L2">
<label>attack detected</label>
</define-functional-event>
<define-functional-event name="L3">
<label>attack interdicted</label>
</define-functional-event>
<define-sequence name="AttackSucceeds"/>
<define-sequence name="AttackFails"/>
<initial-state>
<fork functional-event="L1">
<path state="yes">
<collect-expression>
<parameter name="L1-detection"/>
</collect-expression>
<sequence name="AttackFails"/>
</path>
<path state="no">
<collect-expression>
<sub>
<float value="1"/>
<parameter name="L1-detection"/>
</sub>
</collect-expression>
<fork functional-event="L2">
<path state="yes">
<collect-expression>
<parameter name="L2-detection"/>
</collect-expression>
<fork functional-event="L3">
<path state="yes">
<collect-expression>
<parameter name="L3-detection"/>
</collect-expression>
<sequence name="AttackFails"/>
</path>
<path state="no">
<collect-expression>
<sub>
<float value="1"/>
<parameter name="L3-detection"/>
</sub>
</collect-expression>
<sequence name="AttackSucceeds"/>
</path>
</fork>
</path>
<path state="no">
<collect-expression>
<sub>
<float value="1"/>
<parameter name="L2-detection"/>
</sub>
</collect-expression>
<sequence name="AttackSucceeds"/>
</path>
</fork>
</path>
</fork>
</initial-state>
</define-event-tree>
<model-data>
<define-parameter name="L1-detection">
<float value="0.2"/>
</define-parameter>
<define-parameter name="L2-detection">
<float value="0.7"/>
</define-parameter>
<define-parameter name="L3-detection">
<float value="0.05"/>
</define-parameter>
</model-data>
</opsa-mef>
|
