Work

Automated Repeatable Adversary Threat Emulation with Effects Language (EL)

Year: 2026

Type: article

Abstract: The emulation of multi-step attacks attributed to advanced persistent threats is valuable for training defenders and evaluating defense tools. In this article, we present Effects Language (EL), a novel directly executable visual coordination programming language for such attack emulation, and its operational semantics. EL supports reactive orchestration of an attack graph including lazy precondition evaluation to emulate realistic attack scenarios. EL also enables separation of roles and responsibilities for the threat emulation workflow, and programming for attack resilience. Through a case study we demonstrate how EL can be utilized to bring efficiencies in time and resources in automated threat emulation.

Source: Digital Threats Research and Practice

DOI: 10.1145/3816043

Authors: Suresh K. Damodaran, Paul D. Rowe

Institution: Mitre (United States)

Language: English

Topic: Information and Cyber Security

Subfield: Information Systems

Field: Computer Science

Domain: Physical Sciences

Open Access status: diamond

OpenAlex ID: W4415315045

FWCI:

Cites:

Cited by:

Related to: