Automating threat modeling using an ontology framework

Cybersecurity

Fredrik Heiding¹  Robert Lagerström¹  Margus Välja¹  Ulrik Franke² 

[1] KTH Royal Institute of Technology, 100 44, Stockholm, Sweden;RISE Research Institutes of Sweden, 164 40, Kista, Sweden;

关键词: Threat modeling;    Ontologies;    Automated modeling;    Conceptual models;    Ontology framework;   

DOI  :  10.1186/s42400-020-00060-8

来源: Springer

【 摘 要 】

Threat modeling is of increasing importance to IT security, and it is a complex and resource demanding task. The aim of automating threat modeling is to simplify model creation by using data that are already available. However, the collected data often lack context; this can make the automated models less precise in terms of domain knowledge than those created by an expert human modeler. The lack of domain knowledge in modeling automation can be addressed with ontologies. In this paper, we introduce an ontology framework to improve automatic threat modeling. The framework is developed with conceptual modeling and validated using three different datasets: a small scale utility lab, water utility control network, and university IT environment. The framework produced successful results such as standardizing input sources, removing duplicate name entries, and grouping application software more logically.

【 授权许可】

CC BY