Threat Modeling
99 Followers
Recent papers in Threat Modeling
Software Defined Wide Area Network (SD-WAN or SDWAN) is a modern conception and an attractive trend in network technologies. SD-WAN is defined as a specific application of software-defined networking (SDN) to WAN connections. There is... more
C4I (command, control, communications, computer and intelligence) system is a complex system of systems that enables the military commander to achieve decision superiority by affecting adversary's information and information based... more
Structured Query Language Injection Attack (SQLIA) is one of the most prevalent cyber attacks against web-based application vulnerabilities; that are manipulated through injection techniques to gain access to restricted data, bypass... more
The risks to conflict practitioners, peacemakers, humanitarian aid workers, and others serving ‘in the field’ are diverse, deeply contextual, and ever-changing. While ample literature exists focused around documenting and evaluating the... more
The rapid evolution of the Information and Communications Technology (ICT) services transforms the conventional electrical grid into a new paradigm called Smart Grid (SG). Even though SG brings significant improvements, such as increased... more
This thesis explores the value of threat models in organisation-wide security testing of databases. Factors that drive security testing are explored. Different types of security testing, different approaches to threat modeling and... more
This thesis explores the value of threat models in organisation-wide security testing of databases. Factors that drive security testing are explored. Different types of security testing, different approaches to threat modeling and... more
Threat modeling appears as a modern tool in the hands of Information Security experts, Systems administrators and IT professionals in order to address contemporary IT problems. As we can see, though, the process of Threat modelling is a... more
Current threat modeling methodologies and tools are biased toward systems under development. While, organizations whose IT portfolio is made up of a large number of legacy systems, that run on fundamentally different and incongruous... more
The Hospital Management Information System (SIMRS) functions as a medium for hospital information and hospital management. There are patient medical record data, which is the result of interactions between doctors and sufferer. Medical... more
a. Research a threat modeling tool that you consider is best to model threats to information systems. Provide a diagram of the modeling tool similar to Figure 1 in the article. (2 pts)
... Tom Johnsten University of South Alabama, TJohnsten@usouthal.edu Matt Campbell University of South Alabama, mattcampbell@usouthal.edu ... Matt Campbell University of South Alabama mattcampbell@usouthal.edu Priya Patidar... more
Health records are an integral aspect of any Hospital Management System. With newer innovations in technology, there has been a shift in the way of recording health information. Medical records which used to be managed using various paper... more
Privacy-preservation for sensitive data has become a challenging issue in cloud computing. Threat modeling as a part of requirements engineering in secure software development provides a structured approach for identifying attacks and... more
... Tom Johnsten University of South Alabama, TJohnsten@usouthal.edu Matt Campbell University of South Alabama, mattcampbell@usouthal.edu ... Matt Campbell University of South Alabama mattcampbell@usouthal.edu Priya Patidar... more
Threat modeling is a structured process to identify and enumerate potential threats such as vulnerabilities or lack of defense mechanisms and prioritize security mitigations. Threat modeling intends to equip defenders and the security... more
... Tom Johnsten University of South Alabama, TJohnsten@usouthal.edu Matt Campbell University of South Alabama, mattcampbell@usouthal.edu ... Matt Campbell University of South Alabama mattcampbell@usouthal.edu Priya Patidar... more
Page 1. Identifying Security Requirements Hybrid Technique Vandana Gandotra, Archana Singhal, Punam Bedi, University of Delhi, Delhi, India vandanarla@yahoo.co.in, punambedi@gmail.com, singhal_archana@yahoo.com ... [8] A.Adya, P. Bahl, R.... more
... Tom Johnsten University of South Alabama, TJohnsten@usouthal.edu Matt Campbell University of South Alabama, mattcampbell@usouthal.edu ... Matt Campbell University of South Alabama mattcampbell@usouthal.edu Priya Patidar... more
The Hospital Management Information System (SIMRS) functions as a medium for hospital information and hospital management. There are patient medical record data, which is the result of interactions between doctors and sufferer. Medical... more
This paper begins a process of organizing knowledge of health information security threats into a comprehensive catalog. We begin by describing our risk management perspective of health information security, and then use this perspective... more
Secure routing protocols for mobile ad hoc networks provide the required functionality for proper network operation. If the underlying routing protocol cannot be trusted to follow the protocol operations, additional trust layers, such as... more
Current threat modeling methodologies and tools are biased toward systems under development. While, organizations whose IT portfolio is made up of a large number of legacy systems, that run on fundamentally different and incongruous... more
Transportation cyber-physical systems (TCPS) have the potential to generate, process and exchange significant amounts of security-critical, safety-critical and privacy-sensitive information, which makes them attractive targets for... more