A Conceptual Model for Data-Driven Threat Analysis for Enhancing Cyber Security

Alwaheidi, Mohammed KS, Islam, Shareeful ORCID logoORCID: https://orcid.org/0000-0003-0885-1881 and Papastergiou, Spyridon (2022) A Conceptual Model for Data-Driven Threat Analysis for Enhancing Cyber Security. In: The International Conference on Innovations in Computing Research.

[img] Text
Accepted Version
Restricted to Repository staff only until 11 August 2023.
Available under the following license: Creative Commons Attribution Non-commercial No Derivatives.

Download (439kB) | Request a copy
Official URL: https://link.springer.com/chapter/10.1007/978-3-03...

Abstract

Technology has become increasingly adopted by businesses for achieving overall objectives. Systems within these technologies generate a huge amount of data. It is necessary to identify the data and undertake appropriate controls to protect the data from any potential threats. Data, in general, is different types, such as operational and business which have different costs and impact on the overall business continuity. Threat analysis needs to consider various data types and associated weaknesses related to an organisational context's systems and applications. There are numerous threat models available, but there is a lack of focus on analysing and prioritizing threats relating to the data. This paper presents a data-driven approach for threat analysis and a conceptual model. The model includes several concepts, i.e., actor, infrastructure, data and weakness, to analyse the data and threats from three phases management, control and business. Finally, a running example is used to demonstrate the applicability of the work.

Item Type: Conference or Workshop Item (Paper)
Keywords: Threat modelling, Cyber Attack, Management Data, Data Levels, Control Data, Weakness
Faculty: Faculty of Science & Engineering
SWORD Depositor: Symplectic User
Depositing User: Symplectic User
Date Deposited: 06 Sep 2022 11:25
Last Modified: 06 Sep 2022 11:30
URI: https://arro.anglia.ac.uk/id/eprint/707878

Actions (login required)

Edit Item Edit Item