Translation of AADL model to security attack tree (TAMSAT) to SMART evaluation of monetary security risk

Translation of AADL model to security attack tree (TAMSAT) to SMART evaluation of monetary security risk
复制标题

将 AADL 模型转化为安全攻击树(TAMSAT)以实现货币安全风险的 SMART 评估

DOI:
10.1080/19393555.2022.2106909
复制
发表时间:
2022
期刊:
Information Security Journal: A Global Perspective
影响因子:
--
通讯作者:
Chandy, John
Chandy, John
中科院分区:
--
文献类型:
--
作者:
Wortman, P. A.;Chandy, John

文献摘要

参考文献

被引文献

相似文献

为IT基础设施设计安全的体系结构是一个困难的过程,它需要提供能够帮助指导系统设计过程的安全风险度量的机制。通过这个评估过程,设计人员可以确保模型的实现满足必要的基于安全性的需求。这项工作提出了一个名为TAMSAT的方案,用于将早期系统架构设计模型转换为基于安全的攻击树,并对其进行安全风险评估。这些攻击树可以围绕一组重要资产进行评估,这些资产的安全风险通过货币价值进行分类。此安全风险值可以告知系统设计人员,并为迭代设计过程提供输入,以及阐明未来潜在安全问题的意外来源。
Designing secure architectures for IT infrastructure is a difficult process that needs mechanisms to provide security risk metrics that can help guide the system design process. It is through this evaluation process that a designer can ensure that implementations of a model meet the necessary security-based requirements. This work presents a scheme called TAMSAT for translating early-stage system architecture design models into security-based attack trees, which are evaluated for security risk. These attack trees can be evaluated around a set of assets of importance, whose security risk is classified by a monetary value. This security risk value can inform the system designer and provide input into an iterative design process, as well as illuminate unexpected sources of potential future security issues.
Clarus:运营概念
DOI: --
发表时间: 2005
期刊:
影响因子: --
作者:
L. Osborne;J. Brummond;R. Hart;M. Zarean;S. Conger
通讯作者: S. Conger
使用语义风险模型的安全风险可视化
DOI: --
发表时间: 2016
期刊: ANT/SEIT
影响因子: --
作者:
Outi;J. Toivonen;Antti Evesti;M. Sihvonen;Vesa Jordan
通讯作者: Vesa Jordan
使用图形安全模型进行基于 CVSS 的攻击分析:回顾和智能电网案例研究
DOI: --
发表时间: 2020
期刊: SGIoT
影响因子: --
作者:
T. Le;Mengmeng Ge;Phan The Duy;Hien Do Hoang;A. Anwar;S. Loke;R. Beuran;Yasuo Tan
通讯作者: Yasuo Tan
DOCSDN:软件定义网络的动态优化配置
DOI: 10.1007/978-3-030-21548-4_25
发表时间: 2019
期刊: Information Security and Privacy. ACISP 2019
影响因子: --
作者:
Curry, Timothy;Callahan, Devon;Fuller, Benjamin;Michel, Laurent
通讯作者: Michel, Laurent
DOI: 10.1111/risa.13732
发表时间: 2022-08
期刊: RISK ANALYSIS
影响因子: 3.8
作者:
Allodi, Luca;Massacci, Fabio;Williams, Julian
通讯作者: Williams, Julian