Conference Papers Year : 2024

Hierarchical Model-Based Cybersecurity Risk Assessment During System Design

Abstract

Cybersecurity risk assessment has become a critical priority in systems development and the operation of complex networked systems. However, current state-of-the-art approaches for detecting vulnerabilities, such as automated security testing or penetration testing, often result in late detections. Thus, there is a growing need for security by design, which involves conducting security-related analyses as early as possible in the system development life cycle. This paper proposes a novel hierarchical model-based security risk assessment approach that enables the early assessment of security risks during the system design process. The approach uses different OMG UML-based models, supplemented by a lightweight extension using profiles and stereotypes. Various security attributes, including vulnerability information and asset values, are then used by algorithms to compute relevant properties including threat space, possible attack paths, and selected network-based security metrics. A real-life industrial example is then used to demonstrate the approach.
Embargoed file
Embargoed file
1 10 10
Year Month Jours
Avant la publication
Friday, January 1, 2027
Embargoed file
Friday, January 1, 2027
Please log in to request access to the document

Dates and versions

hal-04953446 , version 1 (18-02-2025)

Licence

Identifiers

Cite

Tino Jungebloud, Nhung H. Nguyen, Dong Seong Kim, Armin Zimmermann. Hierarchical Model-Based Cybersecurity Risk Assessment During System Design. 38th IFIP International Conference on ICT Systems Security and Privacy Protection (SEC), Jun 2023, Poznan, Poland. pp.30-44, ⟨10.1007/978-3-031-56326-3_3⟩. ⟨hal-04953446⟩
0 View
0 Download

Altmetric

Share

More