A descriptive study of Microsoft’s threat modeling technique

Scandariato, Riccardo; Wuyts, Kim; Joosen, Wouter

doi:10.1007/s00766-013-0195-2

Cited by 110 publications

(68 citation statements)

References 31 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…Threat modeling techniques can also be used to guide the hospital information systems administrators in the discovery of the actions that a malicious agent might perform [100]. There will undoubtedly be an increasing threat to the security of patient data with the growing interconnectivity between organizations, the scaling of healthcare information infrastructures [101], the increasing use of mobile instant messaging [102], outsourcing, and upcoming solutions such as cloud computing [30,[103][104][105].…”

Section: Summary Pointsmentioning

confidence: 99%

Analysis of health professional security behaviors in a real clinical setting: An empirical study

Fernández-Alemán

Sánchez-Henarejos

Toval

et al. 2015

International Journal of Medical Informatics

View full text Add to dashboard Cite

Section: Summary Pointsmentioning

confidence: 99%

Analysis of health professional security behaviors in a real clinical setting: An empirical study

Fernández-Alemán

Sánchez-Henarejos

Toval

et al. 2015

International Journal of Medical Informatics

View full text Add to dashboard Cite

“…The security and privacy threats we consider in this motivating scenario focus mainly on the customer-centric plants, as it is the most challenging one with respect to two well-known threat models (the honest-but-curious 160 and the malicious adversarial threat model). To assess all threats we model the networked production workflow as a dataflow diagram on which we carry out a STRIDE security analysis (Scandariato et al, 2015). In Fig.…”

Section: Motivating Scenario On Iot-enabled Networked Productionmentioning

confidence: 99%

Trustworthy data-driven networked production for customer-centric plants

Preuveneers

Joosen

Ilie‐Zudor

2017

IMDS

Self Cite

View full text Add to dashboard Cite

Purpose: Industry 4.0 envisions a future of networked production where interconnected machines and busi-5 ness processes running in the cloud will communicate with one another to optimize production and enable more efficient and sustainable individualized/mass manufacturing. However, the openness and process transparency of networked production in hyperconnected manufacturing enterprises pose severe cyber-security threats and information security challenges that need to be dealt with. 10Design/methodology/approach: This paper presents a distributed trust model and middleware for collaborative and decentralized access control to guarantee data transparency, integrity, authenticity, and authorization of dataflow-oriented Industry 4.0 processes. Findings:The results of a performance study indicate that private blockchains are capable of securing 15IoT-enabled dataflow-oriented networked production processes across the trust boundaries of the Industry 4.0 manufacturing enterprise.Originality/value: This paper contributes a decentralized identity and relationship management for users, sensors, actuators, gateways and cloud services to support processes that cross the trust boundaries of the 20 manufacturing enterprise, while offering protection against malicious adversaries gaining unauthorized access to systems, services and information.

show abstract

“…In contrast, sequence diagrams outperform textual use cases in the identification of threats related to the system's internal working. Scandariato et al [27] evaluated Microsoft STRIDE [5], which is is a mix of graphical (Data Flow Diagrams) and tabular notations. The results showed that STRIDE is not perceived as difficult by the participants but their productivity in threats identified per hour was very low.…”

Section: Background and Related Workmentioning

confidence: 99%

On the Equivalence Between Graphical and Tabular Representations for Security Risk Assessment

Labunets

Massacci

Paci

2017

Requirements Engineering: Foundation for Software Quality

View full text Add to dashboard Cite

Abstract.[Context] Many security risk assessment methods are proposed both in academia (typically with a graphical notation) and industry (typically with a tabular notation).[Question] We compare methods based on those two notations with respect to their actual and perceived efficacy when both groups are equipped with a domain-specific security catalogue (as typically available in industry risk assessments).[Results] Two controlled experiments with MSc students in computer science show that tabular and graphical methods are (statistically) equivalent in quality of identified threats and security controls. In the first experiment the perceived efficacy of tabular method was slightly better than the graphical one, and in the second experiment two methods are perceived as equivalent.[Contribution] A graphical notation does not warrant by itself better (security) requirements elicitation than a tabular notation in terms of the quality of actually identified requirements.

show abstract

A descriptive study of Microsoft’s threat modeling technique

Cited by 110 publications

References 31 publications

Analysis of health professional security behaviors in a real clinical setting: An empirical study

Analysis of health professional security behaviors in a real clinical setting: An empirical study

Trustworthy data-driven networked production for customer-centric plants

On the Equivalence Between Graphical and Tabular Representations for Security Risk Assessment

Contact Info

Product

Resources

About