Modeling Network Security using Colored Petri Nets Model
Abdelali EL BOUCHTI, Abdelkrim HAQIQ
Journal of Networking Technology, Vol. 5, No. 3, 2014.
DOI: 
Link: http://www.dline.info/jnt/fulltext/v5n3/1.pdf
Abstract:
Network security is a complex and challenging problem. The area of network defense mechanism design is receiving immense attention from the research community. However, the network security problem is far from completely solved. In this context, several modeling approaches have been developed, such as approaches based on attack trees (AT). Researchers have been exploring the applicability of colored Petri nets approaches to address the network security issues and some of these approaches look promising.
Petri Nets provide a graphical notation for modeling systems and performing analysis. Colored Petri Nets (CoPNets) combine the strengths of ordinary Petri Nets with a high level programming language, making them more suitable for
modeling large systems. A CoPNet model is an executable representation of a system that can be analyzed through simulation. CoPNet models are built using CoPNet Tools, a graphical software tool and interface used to create, edit, simulate, and analyze models.
This paper proposes Colored Petri Net (CoPNet) modeling approach by extending the attack trees with new modeling constructs and analysis approaches. CoPNet based attack model is flexible enough to model Internet intrusion, including the
static and dynamic features of the intrusion. The process and rules of building CoPNet based attack model from AT are also presented. In order to evaluate the risk of intrusion, some cost elements are added to CoPNet based attack modeling. We show how attack trees can be converted and analyzed in CoPNets. Finally, we provide three case studies that illustrate the CoPNet approach.