Tootfinder

Bridging Threat Models and Detections: Formal Verification via CADP
Dumitru-Bogdan Prelipcean (Bitdefender, Ia\c{s}i, Romania, Alexandru Ioan Cuza University, Iasi, Romania, LACL, Universite Paris-Est Creteil, France), C\u{a}t\u{a}lin Dima (LACL, Universit\'e Paris-Est Cr\'et\'eil, France)
https://arxiv.org/abs/2509.13035

Bridging Threat Models and Detections: Formal Verification via CADP
Threat detection systems rely on rule-based logic to identify adversarial behaviors, yet the conformance of these rules to high-level threat models is rarely verified formally. We present a formal verification framework that models both detection logic and attack trees as labeled transition systems (LTSs), enabling automated conformance checking via bisimulation and weak trace inclusion. Detection rules specified in the Generic Threat Detection Language (GTDL, a general-purpose detection langua…