Our approach is to 1) build a System Object Dependency Graph (SODG) so that the intrusion propagation process is captured at the system ob ject level; 2) construct a Mission­Task-Asset (MTA) map to associate the missions and com­posing tasks with corresponding assets, which are namely the system objects such as processes, files, etc.
if such dependency relations among services can be discovered and represented with specific graphs, then a task can be viewed as the instantiation of a service dependency graph.