Security Stress: Evaluating ICT Robustness Through a Monte Carlo Method

Haruspex is a suite of tools that apply a Monte Carlo method to the risk assessment of an ICT infrastructure. These tools support a scenario-based assessment where in each scenario some intelligent agents compose elementary attacks against the infrastructure to reach some prede ned goals. To support through this suite, the comparison of alternative designs of an infrastructure, we introduce the security stress, a synthetic evaluation of how an ICT infrastructure resists to attacks. After de ning the security stress, we show how it can be approximated through the suite and apply it to compare three versions of a critical infrastructure that supervises a power generation plan.