Security Threat Modeling and Automated Analysis for System Design

2021 ◽  
Vol 4 (1) ◽  
Author(s):  
Baoluo Meng ◽  
William Smith ◽  
Michael Durling
Keyword(s):  
System Design ◽  
Automated Analysis ◽  
Security Threat ◽  
Threat Modeling

scholarly journals Security Threat Modeling

2020 ◽  
Author(s):  
Laurens Sion ◽  
Koen Yskout ◽  
Dimitri Van Landuyt ◽  
Alexander van den Berghe ◽  
Wouter Joosen
Keyword(s):  
Security Threat ◽  
Threat Modeling

scholarly journals Application of Artificial Intelligence in User Interfaces Design for Cyber Security Threat Modeling

2021 ◽  
Author(s):  
Jide Ebenezer Taiwo Akinsola ◽  
Samuel Akinseinde ◽  
Olamide Kalesanwo ◽  
Moruf Adeagbo ◽  
Kayode Oladapo ◽  
...  
Keyword(s):  
Artificial Intelligence ◽  
User Interface ◽  
User Interfaces ◽  
Cyber Security ◽  
Security Threat ◽  
Human Machine Interaction ◽  
Daily Lives ◽  
Threat Modeling ◽  
Ui Design ◽  
Intelligent User Interface

In recent years, Cyber Security threat modeling has been discovered to have the capacity of combatting and mitigating against online threats. In order to minimize the associated risk, these threats need to be modelled with appropriate Intelligent User Interface (IUI) design and consequently the development and evaluation of threat metrics. Artificial Intelligence (AI) has revolutionized every facet of our daily lives and building a responsive Cyber Security Threat Model requires an IUI. The current threat models lack IUI, hence they cannot deliver convenience and efficiency. However, as the User Interface (UI) functionalities and User Experience (UX) continue to increase and deliver more astonishing possibilities, the present threat models lack the predictability capacity thus Machine Learning paradigms must be incorporated. Meanwhile, this deficiency can only be handled through AI-enabled UI that utilizes baseline principles in the design of interfaces for effective Human-Machine Interaction (HMI) with lasting UX. IUI helps developers or designers enhance flexibility, usability, and the relevance of the interaction to improving communication between computer and human. Baseline principles must be applied for developing threat models that will ensure fascinating UI-UX. Application of AI in UI design for Cyber Security Threat Modeling brings about reduction in critical design time and ensures the development of better threat modeling applications and solutions.

Ransomware Security Threat Modeling for Photovoltaic Systems

2021 ◽  
Author(s):  
Ying Su ◽  
Bohyun Ahn ◽  
Syed R. B. Alvee ◽  
Taesic Kim ◽  
Jinchun Choi ◽  
...  
Keyword(s):  
Photovoltaic Systems ◽  
Security Threat ◽  
Threat Modeling

scholarly journals Cyber security threat modeling based on the MITRE Enterprise ATT&CK Matrix

2021 ◽  
Author(s):  
Wenjun Xiong ◽  
Emeline Legrand ◽  
Oscar Åberg ◽  
Robert Lagerström
Keyword(s):  
Cyber Security ◽  
Enterprise Systems ◽  
Cyber Attacks ◽  
Security Threat ◽  
Threat Modeling ◽  
Security Issues ◽  
It Systems ◽  
Relationship Model ◽  
Attack Surface ◽  
Entity Relationship

AbstractEnterprise systems are growing in complexity, and the adoption of cloud and mobile services has greatly increased the attack surface. To proactively address these security issues in enterprise systems, this paper proposes a threat modeling language for enterprise security based on the MITRE Enterprise ATT&CK Matrix. It is designed using the Meta Attack Language framework and focuses on describing system assets, attack steps, defenses, and asset associations. The attack steps in the language represent adversary techniques as listed and described by MITRE. This entity-relationship model describes enterprise IT systems as a whole; by using available tools, the proposed language enables attack simulations on its system model instances. These simulations can be used to investigate security settings and architectural changes that might be implemented to secure the system more effectively. Our proposed language is tested with a number of unit and integration tests. This is visualized in the paper with two real cyber attacks modeled and simulated.

Sign in / Sign up

Export Citation Format

Share Document