research-article

TAM²: automated threat analysis

Authors:

Andreas Schaad,

Mike BorozdinAuthors Info & Claims

SAC '12: Proceedings of the 27th Annual ACM Symposium on Applied Computing

Pages 1103 - 1108

https://doi.org/10.1145/2245276.2231950

Published: 26 March 2012 Publication History

Abstract

Identifying and resolving security problems as early as possible in the software development life cycle should by now be conventional wisdom. However, we observe that there is no threat modeling approach suitable for analysing initial software architecture. Our approach aims to fill this gap by adopting a threat modeling technique (STRIDE) that can be equally applied to software architecture diagrams. Accordingly, we claim and seek to validate that even little additional information on architecture diagrams can yield significant value in a lightweight automated security analysis. We implement and verify our approach by building a tool for automated threat analysis of software architecture diagrams. This is validated in the context of a large-scale industrial software development context providing some initial empirical analysis.

References

[1]

G. Hoglund and G. McGraw, Exploiting Software: How to break code. Pearson Higher Education, 2004.

Digital Library

[2]

S. Myagmar, A. J. Lee, and W. Yurcik, 'Threat modeling as a basis for security requirements,' in Symposium on Requirements Engineering for Information Security (SREIS'05), 2005.

[3]

J. P. Jesan, 'Threat Modeling Web-Applications using STRIDE Average Model,' Information Sciences, no. 2004, 2005.

[4]

Michael Howard, 'Threat Modeling,' Code Magazine, 2002. {http://www.codemagazine.com/Article.aspx?quickid=0211091}

[5]

P. Torr, 'Demystifying the Threat-Modeling Process,' IEEE Security & Privacy Magazine, vol. 3, no. 5, pp. 66--70, Sep. 2005.

Digital Library

[6]

J. Pauli and D. Xu, 'Threat-driven architectural design of secure information systems,' First International Workshop on Protection by Adaptation (PBA), in conjunction with ICEIS 2005

[7]

D. Verdon and G. McGraw, 'Risk analysis in software design,' Security & Privacy, IEEE, vol. 2, no. 4, pp. 79--84, 2004.

Digital Library

[8]

I. Alexander, 'Misuse Cases: Use Cases with Hostile Intent,' IEEE Software, vol. 20, pp. 58--66, 2003.

Digital Library

[9]

F. Braber, I. Hogganvik, M. S. Lund, K. Stølen, and F. Vraalsen, 'Model-based security analysis in seven steps --- a guided tour to the CORAS method,' BT Technology Journal, vol. 25, no. 1, pp. 101--117, Jan. 2007.

Digital Library

[10]

T. Lodderstedt and D. Basin, 'SecureUML: A UML-Based Modeling Language for Model-Driven Security,' in UML 2002, 2002, pp. 426--441.

Digital Library

[11]

J. Jurjens, 'Secure Systems Development with UML', 2005, Springer Academic Publishers

Digital Library

[12]

M. N. Johnstone, 'Threat Modelling with Stride and UML,' in 8th Australian Information Security Management Conference, 2010, no. November, p. 18.

[13]

R. Kissel, 'Glossary of Key Information Security Terms.,' Group. National Institute of Standards and Technology, 2007.

[14]

S. Hernan, S. Lambert, T. Ostwald, and A. Shostack, 'Uncover Security Design Flaws Using The STRIDE Approach,' MSDN Magazine, 2006.

[15]

Microsoft, 'SDL Threat Modeling Tool 2008 {http://go.microsoft.com/?linkid=9706808}

[16]

FMC Modeling, 'TAM - The SAP way combining FMC and UML {http://www.fmc-modeling.org/fmc-and-tam}

[17]

SAP, 'Standardized Technical Architecture Modeling http://www.fmc-modeling.org/download/fmc-and-tam/SAP-TAM_Standard.pdf,' no. March. 2007.

[18]

Common Vulnerabilities and Exposure http://cve.mitre.org/,' The Mitre Corporation.

[19]

NIST, 'National Vulnerability Database Version, {http://nvd.nist.gov/}

[20]

SAP, How to communicate architecture - Technical Architecture Modeling at SAP (part 2), http://www.sdn.sap.com/irj/scn/weblogs?blog=/pub/wlg/8684

[21]

Microsoft, Elevation of Privilege (EoP) Card Game, http://www.microsoft.com/security/sdl/adopt/eop.aspx

Cited By

Gruner BRoychoudhury APaiva AAbreu RStorey M(2024)Accurate Architectural Threat Elicitation From Source Code Through Hybrid Information Flow AnalysisProceedings of the 2024 IEEE/ACM 46th International Conference on Software Engineering: Companion Proceedings10.1145/3639478.3639795(139-141)Online publication date: 14-Apr-2024
https://dl.acm.org/doi/10.1145/3639478.3639795
Landuyt DSion LPhilips WJoosen W(2024)From automation to CI/CD: a comparative evaluation of threat modeling tools2024 IEEE Secure Development Conference (SecDev)10.1109/SecDev61143.2024.00010(35-45)Online publication date: 7-Oct-2024
https://doi.org/10.1109/SecDev61143.2024.00010
Gruner BHeckner SSonnekalb TBouhlal BBrust C(2024)Finding a Needle in a Haystack: Threat Analysis in Open-Source Projects2024 IEEE International Conference on Software Analysis, Evolution and Reengineering - Companion (SANER-C)10.1109/SANER-C62648.2024.00024(141-145)Online publication date: 12-Mar-2024
https://doi.org/10.1109/SANER-C62648.2024.00024
Show More Cited By

Index Terms

TAM²: automated threat analysis
1. Software and its engineering

Recommendations

IMS Threat and Attack Surface Analysis Using Common Vulnerability Scoring System
COMPSACW '11: Proceedings of the 2011 IEEE 35th Annual Computer Software and Applications Conference Workshops

For the purposes of this study, IMS specifications and public sources were analyzed using the general attack surface analysis methodology. These findings were verified and augmented by active scanning and passive analysis of the available real-world IMS ...
Threat Analysis Framework for Safety Architectures in SCDL
Computer Safety, Reliability, and Security
Abstract
Cybersecurity threats have become a reality for safety critical systems such as automobiles, railways and avionics witnessing cybersecurity incidents and research reports from white hackers. Threat analysis plays an important role to identify ...
Developing insider attack detection model: a grounded approach
ISI'09: Proceedings of the 2009 IEEE international conference on Intelligence and security informatics

Insider threats and attacks are a known problem. Within an enterprise it is very difficult to detect and identify insider attacks and abuse against Information Systems. A study was conducted by observing a group of IS security analysts who detect and ...

Comments

Information & Contributors

Information

Published In

cover image ACM Conferences

SAC '12: Proceedings of the 27th Annual ACM Symposium on Applied Computing

March 2012

2179 pages

ISBN:9781450308571

DOI:10.1145/2245276

Conference Chairs:
Sascha Ossowski
University Rey Juan Carlos, Spain
,
Paola Lecca
The Microsoft Research - University of Trento COSBI, Italy

Copyright © 2012 ACM.

Permission to make digital or hard copies of all or part of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for components of this work owned by others than ACM must be honored. Abstracting with credit is permitted. To copy otherwise, or republish, to post on servers or to redistribute to lists, requires prior specific permission and/or a fee. Request permissions from [email protected]

Sponsors

SIGAPP: ACM Special Interest Group on Applied Computing

Publisher

Association for Computing Machinery

New York, NY, United States

Publication History

Published: 26 March 2012

Permissions

Request permissions for this article.

Request Permissions

Check for updates

Author Tags

Qualifiers

Research-article

Conference

SAC 2012

Sponsor:

SIGAPP

SAC 2012: ACM Symposium on Applied Computing

March 26 - 30, 2012

Trento, Italy

Acceptance Rates

SAC '12 Paper Acceptance Rate 270 of 1,056 submissions, 26%;

Overall Acceptance Rate 1,650 of 6,669 submissions, 25%

Upcoming Conference

SAC '25

Sponsor:
sigapp

The 40th ACM/SIGAPP Symposium on Applied Computing

March 31 - April 4, 2025

Catania , Italy

Contributors

Other Metrics

View Article Metrics

Bibliometrics & Citations

Bibliometrics

Article Metrics

17
Total Citations
View Citations
584
Total Downloads

Downloads (Last 12 months)37
Downloads (Last 6 weeks)2

Reflects downloads up to 20 Jan 2025

Other Metrics

View Author Metrics

Citations

Cited By

Gruner BRoychoudhury APaiva AAbreu RStorey M(2024)Accurate Architectural Threat Elicitation From Source Code Through Hybrid Information Flow AnalysisProceedings of the 2024 IEEE/ACM 46th International Conference on Software Engineering: Companion Proceedings10.1145/3639478.3639795(139-141)Online publication date: 14-Apr-2024
https://dl.acm.org/doi/10.1145/3639478.3639795
Landuyt DSion LPhilips WJoosen W(2024)From automation to CI/CD: a comparative evaluation of threat modeling tools2024 IEEE Secure Development Conference (SecDev)10.1109/SecDev61143.2024.00010(35-45)Online publication date: 7-Oct-2024
https://doi.org/10.1109/SecDev61143.2024.00010
Gruner BHeckner SSonnekalb TBouhlal BBrust C(2024)Finding a Needle in a Haystack: Threat Analysis in Open-Source Projects2024 IEEE International Conference on Software Analysis, Evolution and Reengineering - Companion (SANER-C)10.1109/SANER-C62648.2024.00024(141-145)Online publication date: 12-Mar-2024
https://doi.org/10.1109/SANER-C62648.2024.00024
Czekster R(2024)Inspecting Software Architecture Design Styles to Infer Threat Models and Inform Likely AttacksContributions Presented at The International Conference on Computing, Communication, Cybersecurity and AI, July 3–4, 2024, London, UK10.1007/978-3-031-74443-3_4(67-81)Online publication date: 20-Dec-2024
https://doi.org/10.1007/978-3-031-74443-3_4
Granata DRak MSalzillo G(2023)Risk Analysis Automation Process in IT Security for Cloud ApplicationsCloud Computing and Services Science10.1007/978-3-031-21637-4_3(47-68)Online publication date: 1-Jan-2023
https://doi.org/10.1007/978-3-031-21637-4_3
Jasser S(2020)Enforcing Architectural Security Decisions2020 IEEE International Conference on Software Architecture (ICSA)10.1109/ICSA47634.2020.00012(35-45)Online publication date: Mar-2020
https://doi.org/10.1109/ICSA47634.2020.00012
Schaad ABinder D(2020)ML-Supported Identification and Prioritization of Threats in the OVVL Threat Modelling ToolData and Applications Security and Privacy XXXIV10.1007/978-3-030-49669-2_16(274-285)Online publication date: 18-Jun-2020
https://doi.org/10.1007/978-3-030-49669-2_16
Brunner MMussmann ABreu RHung CPapadopoulos G(2019)Enabling change-driven workflows in continuous information security managementProceedings of the 34th ACM/SIGAPP Symposium on Applied Computing10.1145/3297280.3297468(1924-1933)Online publication date: 8-Apr-2019
https://dl.acm.org/doi/10.1145/3297280.3297468
Berger BSohr KKoschke R(2019)The Architectural Security Tool Suite — ARCHSEC2019 19th International Working Conference on Source Code Analysis and Manipulation (SCAM)10.1109/SCAM.2019.00035(250-255)Online publication date: Sep-2019
https://doi.org/10.1109/SCAM.2019.00035
Jasser S(2019)Constraining the Implementation Through Architectural Security Rules: An Expert StudyProduct-Focused Software Process Improvement10.1007/978-3-030-35333-9_15(203-219)Online publication date: 18-Nov-2019
https://doi.org/10.1007/978-3-030-35333-9_15
Show More Cited By

View Options

Login options

Check if you have access through your login credentials or your institution to get full access on this article.

Full Access

Get this Publication

View options

PDF

View or Download as a PDF file.

eReader

View online with eReader.

Media

Figures

Other

Tables

View Table of Contents