Modeling Analysis of SM2 Construction Attacks in the Open Secure Sockets Layer Based on Petri Net

Area of Science:

• Computer Science
• Cybersecurity
• Formal Methods

Background:

• Network security relies on detecting and defending against malicious attacks.
• Traditional defense mechanisms struggle with diverse and rapidly evolving attack methods.
• Predicting network system vulnerabilities is crucial for enhanced security.

Purpose of the Study:

• To propose a formal modeling and analysis approach for predicting network vulnerabilities using Petri nets.
• To demonstrate the effectiveness of this approach in identifying unknown vulnerabilities.
• To validate the simulation's real-time capabilities.

Main Methods:

• Developed a Petri net model using the Common Vulnerabilities and Exposures (CVE)-2021-3711 vulnerability source code.
• Created a patch model to refine the initial vulnerability model.
• Calculated and compared the time taken by actual attackers versus simulated attacks.

Main Results:

• The simulation time was found to be shorter than the actual attack time, indicating ultra-real-time simulation capabilities.
• The Petri net model successfully identified illegitimate states, thereby discovering unknown vulnerabilities.
• The approach provides a reference for exploring novel vulnerabilities in network systems.

Conclusions:

• Petri net-based formal modeling offers an effective method for predicting and discovering network vulnerabilities.
• The proposed approach achieves ultra-real-time simulation, enhancing proactive network defense.
• This technique serves as a valuable tool for identifying previously unknown security weaknesses.