Pattern Detection in Systems Simulation: Towards a Model-Checking Framework for Security Analytics

by Brian Monahan, Nick Papanikolaou
Abstract:
In this paper we describe a method, and implemented prototype, for extracting high-level process models for systems modelled using the a simulation framework (for illustration we use the Gnosis language and toolset). Our technique builds a finite state automaton that characterises one or more simulation runs of a simulation model by including in its states selected parts of the latter’s execution traces. The intention is that the generated automaton reveals the high?level structure of the original model, without making reference to (or requiring knowledge of) the source code of that model. We discuss applications for this technique and identify several directions for further work.
Reference:
Pattern Detection in Systems Simulation: Towards a Model-Checking Framework for Security Analytics (Brian Monahan, Nick Papanikolaou), Technical report, HP Laboratories, 2012.
Bibtex Entry:
@TECHREPORT{Monahan2012,
  author = {Brian Monahan and Nick Papanikolaou},
  title = {Pattern Detection in Systems Simulation: Towards a Model-Checking
	Framework for Security Analytics},
  institution = {HP Laboratories},
  year = {2012},
  type = {HP Labs Technical Report},
  number = {HPL-2012-89},
  abstract = {In this paper we describe a method, and implemented prototype, for
	extracting high-level process models for systems modelled using the
	a simulation framework (for illustration we use the Gnosis language
	and toolset). Our technique builds a finite state automaton that
	characterises one or more simulation runs of a simulation model by
	including in its states selected parts of the latter's execution
	traces. The intention is that the generated automaton reveals the
	high?level structure of the original model, without making reference
	to (or requiring knowledge of) the source code of that model. We
	discuss applications for this technique and identify several directions
	for further work.},
  owner = {Nick},
  timestamp = {2012.02.23},
  url = {../files/monpap1.pdf}
}