On Threat Model Repair

Roderick Bloem; Sebastian Chlup; Dejan Nickovic; Christoph Schmittner

doi:10.1007/978-3-031-75387-9_18

On Threat Model Repair

Roderick Bloem, Sebastian Chlup, Dejan Nickovic (Autor:in und Vortragende:r), Christoph Schmittner

Security & Communication Technologies

Graz University of Technology

Publikation: Beitrag in Buch oder Tagungsband › Vortrag mit Beitrag in Tagungsband › Begutachtung

Abstract

Security by construction is an approach to system development where security considerations are integrated into the design process from the very beginning. Threat modeling helps identify potential threats and vulnerabilities early in the system development process, assess the risk associated with each threat, and design appropriate mitigation actions. In this paper, we study threat model repair, a method to automatically suggest structural changes to the design that mitigate threats discovered by the analysis. This helps find a secure design early in the process by allowing a user to quickly iterate over different design variants.

Originalsprache	Englisch
Titel	Leveraging Applications of Formal Methods, Verification and Validation. Software Engineering Methodologies 12th International Symposium, ISoLA 2024, Crete, Greece, October 27–31, 2024, Proceedings, Part IV
Herausgeber (Verlag)	Springer Nature
Seiten	302–310
Band	15222
Auflage	1
ISBN (elektronisch)	978-3-031-75387-9
ISBN (Print)	978-3-031-75386-2
DOIs	https://doi.org/10.1007/978-3-031-75387-9_18
Publikationsstatus	Veröffentlicht - 2024
Veranstaltung	12th International Symposium, ISoLA 2024 - Crete, Crete, Griechenland Dauer: 27 Okt. 2024 → 31 Okt. 2024

Konferenz

Konferenz	12th International Symposium, ISoLA 2024
Land/Gebiet	Griechenland
Stadt	Crete
Zeitraum	27/10/24 → 31/10/24

Research Field

Dependable Systems Engineering

Zugriff auf Dokument

10.1007/978-3-031-75387-9_18

Ausfuhrbeschränktes Dokument

Threat_Model_Repair (4)
Akzeptiertes Autorenmanuskript, 337 KB

Diese Publikation zitieren

Bloem, R., Chlup, S., Nickovic, D., & Schmittner, C. (2024). On Threat Model Repair. in Leveraging Applications of Formal Methods, Verification and Validation. Software Engineering Methodologies 12th International Symposium, ISoLA 2024, Crete, Greece, October 27–31, 2024, Proceedings, Part IV (1 Aufl., Band 15222, S. 302–310). Springer Nature. https://doi.org/10.1007/978-3-031-75387-9_18

@inproceedings{a17ed330bc694a30ab1ec20e4577a9af,

title = "On Threat Model Repair",

abstract = "Security by construction is an approach to system development where security considerations are integrated into the design process from the very beginning. Threat modeling helps identify potential threats and vulnerabilities early in the system development process, assess the risk associated with each threat, and design appropriate mitigation actions. In this paper, we study threat model repair, a method to automatically suggest structural changes to the design that mitigate threats discovered by the analysis. This helps find a secure design early in the process by allowing a user to quickly iterate over different design variants.",

author = "Roderick Bloem and Sebastian Chlup and Dejan Nickovic and Christoph Schmittner",

year = "2024",

doi = "10.1007/978-3-031-75387-9_18",

language = "English",

isbn = "978-3-031-75386-2",

volume = "15222",

pages = "302–310",

booktitle = "Leveraging Applications of Formal Methods, Verification and Validation. Software Engineering Methodologies 12th International Symposium, ISoLA 2024, Crete, Greece, October 27–31, 2024, Proceedings, Part IV",

publisher = "Springer Nature",

address = "Switzerland",

edition = "1",

note = "12th International Symposium, ISoLA 2024 ; Conference date: 27-10-2024 Through 31-10-2024",

}

Bloem, R, Chlup, S , Nickovic, D & Schmittner, C 2024, On Threat Model Repair. in Leveraging Applications of Formal Methods, Verification and Validation. Software Engineering Methodologies 12th International Symposium, ISoLA 2024, Crete, Greece, October 27–31, 2024, Proceedings, Part IV. 1 Aufl., Bd. 15222, Springer Nature, S. 302–310, 12th International Symposium, ISoLA 2024, Crete, Griechenland, 27/10/24. https://doi.org/10.1007/978-3-031-75387-9_18

On Threat Model Repair. / Bloem, Roderick; Chlup, Sebastian ; Nickovic, Dejan (Autor:in und Vortragende:r) et al.
Leveraging Applications of Formal Methods, Verification and Validation. Software Engineering Methodologies 12th International Symposium, ISoLA 2024, Crete, Greece, October 27–31, 2024, Proceedings, Part IV. Band 15222 1. Aufl. Springer Nature, 2024. S. 302–310.

Publikation: Beitrag in Buch oder Tagungsband › Vortrag mit Beitrag in Tagungsband › Begutachtung

TY - GEN

T1 - On Threat Model Repair

AU - Bloem, Roderick

AU - Chlup, Sebastian

AU - Schmittner, Christoph

A2 - Nickovic, Dejan

PY - 2024

Y1 - 2024

N2 - Security by construction is an approach to system development where security considerations are integrated into the design process from the very beginning. Threat modeling helps identify potential threats and vulnerabilities early in the system development process, assess the risk associated with each threat, and design appropriate mitigation actions. In this paper, we study threat model repair, a method to automatically suggest structural changes to the design that mitigate threats discovered by the analysis. This helps find a secure design early in the process by allowing a user to quickly iterate over different design variants.

AB - Security by construction is an approach to system development where security considerations are integrated into the design process from the very beginning. Threat modeling helps identify potential threats and vulnerabilities early in the system development process, assess the risk associated with each threat, and design appropriate mitigation actions. In this paper, we study threat model repair, a method to automatically suggest structural changes to the design that mitigate threats discovered by the analysis. This helps find a secure design early in the process by allowing a user to quickly iterate over different design variants.

U2 - 10.1007/978-3-031-75387-9_18

DO - 10.1007/978-3-031-75387-9_18

M3 - Conference Proceedings with Oral Presentation

SN - 978-3-031-75386-2

VL - 15222

SP - 302

EP - 310

BT - Leveraging Applications of Formal Methods, Verification and Validation. Software Engineering Methodologies 12th International Symposium, ISoLA 2024, Crete, Greece, October 27–31, 2024, Proceedings, Part IV

PB - Springer Nature

T2 - 12th International Symposium, ISoLA 2024

Y2 - 27 October 2024 through 31 October 2024

ER -

On Threat Model Repair

Abstract

Konferenz

Research Field

Zugriff auf Dokument

Ausfuhrbeschränktes Dokument

Fingerprint

Diese Publikation zitieren