Threat modeling is the process of identifying and mitigating potential threats to a system. It
was originally developed to enhance software security during the design phase but has …

The popularity of cyberspace is skyrocketing as the need to make systems digital,
transparent, and fast is becoming indispensable, increasing the need for enhanced security …

Detecting and addressing security vulnerabilities in software designs is crucial for ensuring
the reliable and safe operation of systems. Existing approaches for vulnerability specification …

This paper discusses the progress made so far and future challenges in integrating the
analysis of multiple Non-Functional Properties (NFP)(such as performance, schedulability …

This works considers challenges of building and usage a formal knowledge base (model),
which unites the ATT&CK, CAPEC, CWE, CVE security enumerations. The proposed model …

In this report, we have reviewed cybersecurity risk analysis methods and tools. A specific
focus is given to methods suitable for industrial control systems in the nuclear domain. For …

Intelligent transportation systems, such as connected vehicles, are able to establish real-
time, optimized and collision-free communication with the surrounding ecosystem …

The integration of safety and security concerns in critical domains (eg, Cyber-Physical
Systems (CPSs)) is of utmost importance, and should be conducted in early design phases …

Assuring that security requirements have been met in design phases is less expensive
compared with changes after system development. Security-critical systems deployment …

For a long time threat modeling was treated as a manual, complicated process. However
modern agile development methodologies and cloud computing technologies require …