Value Driven Security Threat Modeling Based on Attack Path Analysis
Authors:
- 1 January 2007
- conference paper
- Published by Institute of Electrical and Electronics Engineers (IEEE)
- p. 280a
Abstract
This paper presents a quantitative threat modeling method, the threat modeling method based on attack path analysis (T-MAP), which quantifies security threats by calculating the total severity weights of relevant attack paths for commercial off the shelf (COTS) systems. Compared to existing approaches, T-MAP is sensitive to an organization's business value priorities and IT environment. It distills the technical details of thousands of relevant software vulnerabilities into management-friendly numbers at a high-level. T-MAP can help system designers evaluate the security performance of COTS systems and analyze the effectiveness of security practices. In the case study, we demonstrate the steps of using T-MAP to analyze the cost-effectiveness of how system patching and upgrades can improve security. In addition, we introduce a software tool that automates the T-MAPKeywords
This publication has 3 references indexed in Scilit:
- Evaluating information security investments using the analytic hierarchy processCommunications of the ACM, 2005
- A model for evaluating IT security investmentsCommunications of the ACM, 2004
- The economics of information security investmentACM Transactions on Information and System Security, 2002