On Threat Model Repair

Roderick Bloem; Sebastian Chlup; Dejan Nickovic; Christoph Schmittner

doi:10.1007/978-3-031-75387-9_18

On Threat Model Repair

Roderick Bloem, Sebastian Chlup, Dejan Nickovic (Author and Speaker), Christoph Schmittner

Security & Communication Technologies

Graz University of Technology

Research output: Chapter in Book or Conference Proceedings › Conference Proceedings with Oral Presentation › peer-review

Abstract

Security by construction is an approach to system development where security considerations are integrated into the design process from the very beginning. Threat modeling helps identify potential threats and vulnerabilities early in the system development process, assess the risk associated with each threat, and design appropriate mitigation actions. In this paper, we study threat model repair, a method to automatically suggest structural changes to the design that mitigate threats discovered by the analysis. This helps find a secure design early in the process by allowing a user to quickly iterate over different design variants.

Original language	English
Title of host publication	Leveraging Applications of Formal Methods, Verification and Validation. Software Engineering Methodologies 12th International Symposium, ISoLA 2024, Crete, Greece, October 27–31, 2024, Proceedings, Part IV
Publisher	Springer Nature
Pages	302–310
Volume	15222
Edition	1
ISBN (Electronic)	978-3-031-75387-9
ISBN (Print)	978-3-031-75386-2
DOIs	https://doi.org/10.1007/978-3-031-75387-9_18
Publication status	Published - 2024
Event	12th International Symposium, ISoLA 2024 - Crete, Crete, Greece Duration: 27 Oct 2024 → 31 Oct 2024

Conference

Conference	12th International Symposium, ISoLA 2024
Country/Territory	Greece
City	Crete
Period	27/10/24 → 31/10/24

Research Field

Dependable Systems Engineering

Access to Document

10.1007/978-3-031-75387-9_18

Embargoed Document

Threat_Model_Repair (4)
Accepted author manuscript, 337 KB

Cite this

Bloem, R., Chlup, S., Nickovic, D., & Schmittner, C. (2024). On Threat Model Repair. In Leveraging Applications of Formal Methods, Verification and Validation. Software Engineering Methodologies 12th International Symposium, ISoLA 2024, Crete, Greece, October 27–31, 2024, Proceedings, Part IV (1 ed., Vol. 15222, pp. 302–310). Springer Nature. https://doi.org/10.1007/978-3-031-75387-9_18

@inproceedings{a17ed330bc694a30ab1ec20e4577a9af,

title = "On Threat Model Repair",

abstract = "Security by construction is an approach to system development where security considerations are integrated into the design process from the very beginning. Threat modeling helps identify potential threats and vulnerabilities early in the system development process, assess the risk associated with each threat, and design appropriate mitigation actions. In this paper, we study threat model repair, a method to automatically suggest structural changes to the design that mitigate threats discovered by the analysis. This helps find a secure design early in the process by allowing a user to quickly iterate over different design variants.",

author = "Roderick Bloem and Sebastian Chlup and Dejan Nickovic and Christoph Schmittner",

year = "2024",

doi = "10.1007/978-3-031-75387-9_18",

language = "English",

isbn = "978-3-031-75386-2",

volume = "15222",

pages = "302–310",

booktitle = "Leveraging Applications of Formal Methods, Verification and Validation. Software Engineering Methodologies 12th International Symposium, ISoLA 2024, Crete, Greece, October 27–31, 2024, Proceedings, Part IV",

publisher = "Springer Nature",

address = "Switzerland",

edition = "1",

note = "12th International Symposium, ISoLA 2024 ; Conference date: 27-10-2024 Through 31-10-2024",

}

Bloem, R, Chlup, S , Nickovic, D & Schmittner, C 2024, On Threat Model Repair. in Leveraging Applications of Formal Methods, Verification and Validation. Software Engineering Methodologies 12th International Symposium, ISoLA 2024, Crete, Greece, October 27–31, 2024, Proceedings, Part IV. 1 edn, vol. 15222, Springer Nature, pp. 302–310, 12th International Symposium, ISoLA 2024, Crete, Greece, 27/10/24. https://doi.org/10.1007/978-3-031-75387-9_18

On Threat Model Repair. / Bloem, Roderick; Chlup, Sebastian ; Nickovic, Dejan (Author and Speaker) et al.
Leveraging Applications of Formal Methods, Verification and Validation. Software Engineering Methodologies 12th International Symposium, ISoLA 2024, Crete, Greece, October 27–31, 2024, Proceedings, Part IV. Vol. 15222 1. ed. Springer Nature, 2024. p. 302–310.

Research output: Chapter in Book or Conference Proceedings › Conference Proceedings with Oral Presentation › peer-review

TY - GEN

T1 - On Threat Model Repair

AU - Bloem, Roderick

AU - Chlup, Sebastian

AU - Schmittner, Christoph

A2 - Nickovic, Dejan

PY - 2024

Y1 - 2024

N2 - Security by construction is an approach to system development where security considerations are integrated into the design process from the very beginning. Threat modeling helps identify potential threats and vulnerabilities early in the system development process, assess the risk associated with each threat, and design appropriate mitigation actions. In this paper, we study threat model repair, a method to automatically suggest structural changes to the design that mitigate threats discovered by the analysis. This helps find a secure design early in the process by allowing a user to quickly iterate over different design variants.

AB - Security by construction is an approach to system development where security considerations are integrated into the design process from the very beginning. Threat modeling helps identify potential threats and vulnerabilities early in the system development process, assess the risk associated with each threat, and design appropriate mitigation actions. In this paper, we study threat model repair, a method to automatically suggest structural changes to the design that mitigate threats discovered by the analysis. This helps find a secure design early in the process by allowing a user to quickly iterate over different design variants.

U2 - 10.1007/978-3-031-75387-9_18

DO - 10.1007/978-3-031-75387-9_18

M3 - Conference Proceedings with Oral Presentation

SN - 978-3-031-75386-2

VL - 15222

SP - 302

EP - 310

BT - Leveraging Applications of Formal Methods, Verification and Validation. Software Engineering Methodologies 12th International Symposium, ISoLA 2024, Crete, Greece, October 27–31, 2024, Proceedings, Part IV

PB - Springer Nature

T2 - 12th International Symposium, ISoLA 2024

Y2 - 27 October 2024 through 31 October 2024

ER -

On Threat Model Repair

Abstract

Conference

Research Field

Access to Document

Embargoed Document

Fingerprint

Cite this