Threat tree templates to ease difficulties in threat modeling

Proceedings - 2011 International Conference on Network-Based Information Systems, NBiS 2011

Volumn , Issue , 2011, Pages 673-678

  Morikawa, Ikuya ^a   Yamaoka, Yuji ^a  

^a FUJITSU LABORATORIES LTD   (Japan)

Author keywords

Security analysis; Software design; Threat modeling

Indexed keywords

ATTACK SCENARIOS; POTENTIAL ATTACK; SECURITY ANALYSIS; THREAT MODELING;

INFORMATION SYSTEMS; RISK PERCEPTION; SECURITY SYSTEMS; SOFTWARE DESIGN;

PLANT EXTRACTS;

EID: 80455162656     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/NBiS.2011.113     Document Type: Conference Paper

References (6)

1. Howard, Michael and LeBlanc, David, Writing Secure Code, 2nd ed., Microsoft Press, 2002.
2. Howard, Michael and Lipner, Steve, SDL: The Security Development Lifecycle, Microsoft Press, 2006.
3. Li, Xiaohong and He, Ke, A Unified Threat Model for Assessing Threat in Web Applications, in Proc. of 2nd International Conference of Information Security and Assurance (ISA-08), pp. 142-145, 2008.
4. The MITRE Corporation, CAPEC: Common Attack Pattern Enumeration and Classification, available at http://capec.mitre. org/.
5. Schneier, Bruce, Attack Trees, Dr. Dobb's Journal, December 1999.
6. Swiderski, Frank and Snyder, Window, Threat Modeling, Microsoft Press, 2004.