Aleksandr Lenin MSc Thesis topics

Thesis topics to offer

Algorithms for Security Analysis:

• [TREsPASS] A genetic (evolutionary) algorithm for the Failure-Free risk assessment model.

      [Priority: High Status: In progress Due: April 2015]

• [TREsPASS] Attack scenario transformation component. Design and implementation.

      [Priority: High Status: In progress Due: April 2015]

• [TREsPASS] Comparison of the genetic algorihm for the Failure-Free model with the Failure-Free model upper bounds estimation. Assessment of performance. Benchmarking and analysis.

      [Priority: Medium Status: Pending Due: June 2015]

Security Modelling:

• [TREsPASS] A structure for representing attack scenarios in the form of attack graphs in xml file.

      [Priority: Low Status: Pending Due: June 2015]

• Attack Process Graphs -- a new look into security modelling and analysis.

      [Priority: Low Status: Pending Due: TBA]

Fuzzy Metrics for Security:

• [TREsPASS] Fuzziness as a measure of uncertainty in quantitative security metrics.

      [Priority: High Status: In progress Due: April 2015]

Fuzzy decision making and control:

• [TREsPASS] Fuzzy attacker profiling

      [Priority: Medium Status: Pending Due: June 2015]

• [TREsPASS] Fuzzy reasoning and computations for the Failure-Free risk assessment model.

      [Priority: Medium Status: Pending Due: June 2015]

Security modelling patterns:

• [TREsPASS] APL (Attack Pattern Library) and MPL (Model Pattern Library) design and implementation.

      [Priority: High Status: Pending Due: April 2015]

• [TREsPASS] Social APL (Attack Pattern Library) design and implementation.

      [Priority: Low Status: Pending Due: TBA]

• A library of attacker behavioral patterns.

      [Priority: Low Status: Pending Due: TBA]

Quantitative Security Risk Analysis:

• [TREsPASS] Approximation of fully-adaptive strategies by the most optimal non-adaptive strategy. Assessment of precision and viability of the approach.

      [Priority: Medium Status: In Progress Due: June 2015]

ISKE:

• [TREsPASS] ISKE-TREsPASS integration. Case study.

      [Priority: High Status: In progress Due: April 2015]

Security Games:

• Defender game for the quantitative security analysis models.

      [Priority: Low Status: Pending Due: TBA]

• Attacker-defender strategic interaction. Stackleberg equilibrium and security analysis.

      [Priority: Low Status: Pending Due: TBA]

Defended thesis topics

• Attacker Profiling in Quantitative Security Assessment [Defended: Jan 2014]
• Performance Analysis of Attacker Profiling in Quantitative Security Risk Assessment [Defended: June 2014]
• Assessment of Integration Possibilities of the TREsPASS Toolset into the ISKE tool [Defended: Jan 2015]