A review of threat modelling approaches for APT-style attacks

    Research output: Contribution to journalReview articlepeer-review

    59 Citations (Scopus)
    6014 Downloads (Pure)

    Abstract

    Threats are potential events, intentional or not, that compromise the confidentiality, integrity, and/or availability of information systems. Defending against threats and attacks requires actionable threat intelligence. Using this intelligence to minimise risk, requires a systematic methodology or framework that recognises every possible threat scenario. This can be done with Threat Modelling (TM), which assists with identifying, understanding and providing visibility of threats affecting an organisation. The focus of this study is to determine TM limitations, strengths, and any perceivable gaps. It has also focused on identifying any possible enhancements that may improve TM performance and efficiency when modelling sophisticated attacks such as Advanced Persistent Threats (APT).

    Original languageEnglish
    Article numbere05969
    Pages (from-to)1-19
    Number of pages19
    JournalHeliyon
    Volume7
    Issue number1
    DOIs
    Publication statusPublished - Jan 2021

    Bibliographical note

    Publisher Copyright:
    © 2021 The Authors

    Fingerprint

    Dive into the research topics of 'A review of threat modelling approaches for APT-style attacks'. Together they form a unique fingerprint.

    Cite this