Automatic generation of attack scenarios for intrusion detection systems

The aim of this paper is to propose a new formal technique for modeling system vulnerabilities and automatic generation of attack scenarios exploiting these vulnerabilities for intrusion detection systems. Our technique is generic and can be applied to various domains including web services, web servers, distributed applications using the Internet, etc.