25 citations · 99 across the 22 of their papers we have counts for
22 papers
Towards realistic large random models of labeled transition systems and their 0-1 laws
Milan Lopuhaä-Zwakenberg
Model checking is the automated verification of properties (specified in some modal logic) in labeled transition systems (LTSs); it is an essential tool in ensuring software system…
Actual causality in fault trees
Georgiana Caltais, Milan Lopuhaä-Zwakenberg, Mariëlle Stoelinga
Fault trees are a widely used as effective risk models for complex systems, answering the question "what can go wrong?", especially through minimal cut set analysis. We study fault…
Quantitative analysis of attack-fault trees via Markov decision processes
Milan Lopuhaä-Zwakenberg
Adequate risk assessment of safety critical systems needs to take both safety and security into account, as well as their interaction. A prominent methodology for modeling safety a…
Provable Privacy Advantages of Decentralized Federated Learning via Distributed Optimization
Wenrui Yu, Qiongxiu Li, Milan Lopuhaä-Zwakenberg +2
Federated learning (FL) emerged as a paradigm designed to improve data privacy by enabling data to reside at its source, thus embedding privacy as a core consideration in FL archit…
Fuzzy Fault Trees Formalized
Thi Kim Nhung Dang, Milan Lopuhaä-Zwakenberg, Mariëlle Stoelinga
Fault tree analysis is a vital method of assessing safety risks. It helps to identify potential causes of accidents, assess their likelihood and severity, and suggest preventive me…
Querying Fault and Attack Trees: Property Specification on a Water Network
Stefano M. Nicoletti, Milan Lopuhaä-Zwakenberg, E. Moritz Hahn +1
We provide an overview of three different query languages whose objective is to specify properties on the highly popular formalisms of fault trees (FTs) and attack trees (ATs). The…
Fuzzy quantitative attack tree analysis
Thi Kim Nhung Dang, Milan Lopuhaä-Zwakenberg, Mariëlle Stoelinga
Attack trees are important for security, as they help to identify weaknesses and vulnerabilities in a system. Quantitative attack tree analysis supports a number security metrics,…
Attack tree metrics are operad algebras
Milan Lopuhaä-Zwakenberg
Attack Trees (ATs) are a widely used tool for security analysis. ATs can be employed in quantitative security analysis through metrics, which assign a security value to an AT. Many…
Fault tree reliability analysis via squarefree polynomials
Milan Lopuhaä-Zwakenberg
Fault tree (FT) analysis is a prominent risk assessment method in industrial systems. Unreliability is one of the key safety metrics in quantitative FT analysis. Existing algorithm…
Adaptive Differentially Quantized Subspace Perturbation (ADQSP): A Unified Framework for Privacy-Preserving Distributed Average Consensus
Qiongxiu Li, Jaron Skovsted Gundersen, Milan Lopuhaa-Zwakenberg +1
Privacy-preserving distributed average consensus has received significant attention recently due to its wide applicability. Based on the achieved performances, existing approaches…
ATM: a Logic for Quantitative Security Properties on Attack Trees
Stefano M. Nicoletti, Milan Lopuhaä-Zwakenberg, E. Moritz Hahn +1
Critical infrastructure systems - for which high reliability and availability are paramount - must operate securely. Attack trees (ATs) are hierarchical diagrams that offer a flexi…
Cost-damage analysis of attack trees
Milan Lopuhaä-Zwakenberg, Mariëlle Stoelinga
Attack trees (ATs) are a widely deployed modelling technique to categorize potential attacks on a system. An attacker of such a system aims at doing as much damage as possible, but…
PFL: a Probabilistic Logic for Fault Trees
Stefano M. Nicoletti, Milan Lopuhaä-Zwakenberg, E. Moritz Hahn +1
Safety-critical infrastructures must operate in a safe and reliable way. Fault tree analysis is a widespread method used for risk assessment of these systems: fault trees (FTs) are…
Efficient and Generic Algorithms for Quantitative Attack Tree Analysis
Milan Lopuhaä-Zwakenberg, Carlos E. Budde, Mariëlle Stoelinga
Numerous analysis methods for quantitative attack tree analysis have been proposed. These algorithms compute relevant security metrics, i.e. performance indicators that quantify ho…
Attack time analysis in dynamic attack trees via integer linear programming
Milan Lopuhaä-Zwakenberg, Mariëlle Stoelinga
Attack trees (ATs) are an important tool in security analysis, and an important part of AT analysis is computing metrics. However, metric computation is NP-complete in general. In…
Data Sanitisation Protocols for the Privacy Funnel with Differential Privacy Guarantees
Milan Lopuhaä-Zwakenberg, Haochen Tong, Boris Škorić
In the Open Data approach, governments and other public organisations want to share their datasets with the public, for accountability and to support participation. Data must be op…
The Privacy Funnel from the viewpoint of Local Differential Privacy
Milan Lopuhaä-Zwakenberg
We consider a database containing the data of users. The data aggregator wants to publicise the database, but wishes to sanitise the dataset to hid…
Estimating Numerical Distributions under Local Differential Privacy
Zitao Li, Tianhao Wang, Milan Lopuhaä-Zwakenberg +2
When collecting information, local differential privacy (LDP) relieves the concern of privacy leakage from users' perspective, as user's private information is randomized before se…
Improving Frequency Estimation under Local Differential Privacy
Milan Lopuhaä-Zwakenberg, Zitao Li, Boris Škorić +1
Local Differential Privacy protocols are stochastic protocols used in data aggregation when individual users do not trust the data aggregator with their private data. In such proto…
Information-theoretic metrics for Local Differential Privacy protocols
Milan Lopuhaä-Zwakenberg, Boris Škorić, Ninghui Li
Local Differential Privacy (LDP) protocols allow an aggregator to obtain population statistics about sensitive data of a userbase, while protecting the privacy of the individual us…
Locally Differentially Private Frequency Estimation with Consistency
Tianhao Wang, Milan Lopuhaä-Zwakenberg, Zitao Li +2
Local Differential Privacy (LDP) protects user privacy from the data collector. LDP protocols have been increasingly deployed in the industry. A basic building block is frequency o…
Integral models of reductive groups and integral Mumford-Tate groups
Milan Lopuhaä-Zwakenberg
Let be a reductive algebraic group over a -adic field or number field , and let be a -linear faithful representation of . A lattice in the vector space …