.png){kind=icon}
返回
A Multi-level Reference Model and a Dedicated Method for Cyber-Security by Design
.png){kind=icon}
OA
AI
DOI：10.1007/s12599-024-00899-y.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
The increased reliance of organizations on information technology inherently increases their vulnerability to cyber-security attacks. As a response, a host of cyber-security approaches exists. While useful, these approaches exhibit shortcomings such as an inclination to be fragmented, not accounting for up-to-date organizational data, focusing on singular vulnerabilities only, and being reactive, i.e., focusing on patching up vulnerabilities in current systems. The paper presents and evaluates a modeling method aiming to address those shortcomings and to support security by design with a focus on the electricity sector. The proposed modeling method encompasses a multi-level reference model reconstructing and integrating existing initiatives and supporting top-down and bottom-up analyses. Compared to earlier work, the paper contributes (1) a process model for cyber-security by design, which proactively considers security as a first-class citizen during the design process, (2) a complete coverage of the multi-level model, in terms of three views complementing the introduced process model, (3) an elaborated evaluation, in terms of reporting on an additional design science cycle.
Keyword:
Cyber-security by design
Modeling method
Security reference framework
Security analysis
Multi-level modeling
期刊
IF:
10.4
论文数:
862
被引数:
4.0K
机构
引用论文
.png){kind=icon}
分享收藏Multilevel Modeling Toward a New Paradigm of Conceptual Modeling and Information Systems Design
PREAI
分享收藏A systematic literature review of model-driven security engineering for cyber-physical systems网络物理系统模型驱动安全工程的系统文献综述
PREAI
分享收藏
查看更多内容