Harùspex: a Suite to Assess and Manage ICT Risk by Simulating Threat Agents

Haruspex is a suite that supports a scenario-based assessment. In each scenario, intelligent agents compose elementary attacks against an ICT system to reach some predefined goals. Some Haruspex tools build the models of the target system and of the agents of interest. Using these model, further tools apply a Monte Carlo method with multiple, independent simulations of the agent attacks and return a sample to compute statistics of interest. Other Haruspex tools use the statistics to produce some security stress curves that evaluate the system robustness and select countermeasures to improve it. After describing our approach and the tools, we detail the assessment of a turbo gas power generation plant.