Application of software fault tree method in intrusion detection system analysis

In this paper, software fault tree analysis (SFTA) is used to assist in determining and verifying the requirements for an intrusion detection system (IDS). Division Of fault trees for intrusions into seven stages was examined. and sample fault trees for each of the intrusion stages were described and penetration fault tree is given as in example. Using these staged subtrees, two intrusions were examined and software requirements for detection of the attacks were derived from examination of the trees and associated minimum cut sets. An example use of software fault tree analysis for guiding countermeasures' requirements analysis was also described.