Organizations employ various adversary models to assess the risk and potential impact of
attacks on their networks. A popular method of visually representing cyber risks is the attack …

Software vulnerabilities can affect critical systems within an organization impacting
processes, workflows, privacy, and safety. When a software vulnerability becomes known …

Data produced by end devices like smartphones, sensors or IoT devices can be stored and
processed across a continuum of compute resources, from end devices via fog nodes to the …

Self-adaptive systems offer several attack surfaces due to the communication via different
channels and the different sensors required to observe the environment. Often, attacks …

Security attacks present unique challenges to the design of self-adaptation mechanism for
software-intensive systems due to the adversarial nature of the environment. Game …

As threats to computer security become more common, complex and frequent, systems that
can automatically protect themselves from attacks are imminently needed. In this paper, we …

Security risk assessment is an important challenge in the design of Cyber Physical Systems
(CPS). Even more importantly, the intrinsically dynamical nature of these systems, due to …

A threat modeling exercise involves systematically assessing the likelihood and potential
impact of diverse threat scenarios. As threat modeling approaches and tools act at the level …

Attacks against business logic rules occur when the attacker exploits the domain rules in a
malicious way. Such attacks have not received sufficient attention in research so far. In this …

Modern software systems are decentralized, distributed, and dynamic, and consequently,
require decentralized mechanisms to enforce security. In this paper, we propose an adaptive …