Results 221 to 230 of about 78,535 (255)

Threat Modeling for CSRF Attacks

2009 International Conference on Computational Science and Engineering, 2009
Cross-Site Request Forgery (CSRF) vulnerability is extremely widespread and one of the top ten Web application vulnerabilities of the Open Web Application Security Project (OWASP). In this paper, we explore the CSRF vulnerabilities, illustrate the real-world CSRF attack, and present novel CSRF attack tree models. The threat models provide for exploring,
Xiaoli Lin, Pavol Zavarsky, Ron Ruhl, Dale Lindskog   +3 more
openaire   +1 more source

Threat processing: models and mechanisms

WIREs Cognitive Science, 2015
The experience of fear is closely linked to the survival of species. Fear can be conceptualized as a brain state that orchestrates defense reactions to threats. To avoid harm, an organism must be equipped with neural circuits that allow learning, detecting, and rapidly responding to threats.
Bentz, Dorothée, Schiller, Daniela
openaire   +4 more sources

An Insider Threat Prediction Model

2010
Information systems face several security threats, some of which originate by insiders. This paper presents a novel, interdisciplinary insider threat prediction model. It combines approaches, techniques, and tools from computer science and psychology.
Miltiadis Kandias, Alexios Mylonas, Nikos Virvilis, Marianthi Theoharidou, Dimitris Gritzalis   +4 more
openaire   +1 more source

The case for threat modelling

Network Security, 2022
openaire   +1 more source

Post-Snowden Threat Models

Proceedings of the 20th ACM Symposium on Access Control Models and Technologies, 2015
In June 2013 Edward Snowden leaked a large collection of documents that describe the capabilities and technologies of the NSA and its allies. Even to security experts the scale, nature and impact of some of the techniques revealed was surprising. A major consequence is the increased awareness of the public at large of the existence of highly intrusive ...
openaire   +1 more source

Ecurrency threat modeling and hardening

2015 World Congress on Internet Security (WorldCIS), 2015
In this paper I investigate the problem of providing application domain security constraints to distributed systems will maintaining high availability. This study uses the application domain of business loyalty incentives as a motivating example. The loyalty incentives are earned through electronic point and currency programs while the modeled system ...
openaire   +1 more source

Overcoming Fear of the Threat Model

2017
In recognising that it is the human factor that generally identifies risk and maps out the functionality of a system - its goal in other words - it is clear that this strength can be undermined by fallibility. The question we need to ask is how do we optimise the strengths of the human element and minimise the risk they present to the system? How do we
openaire   +1 more source

Demystifying the Threat-Modeling Process

IEEE Security and Privacy Magazine, 2005
In today's hostile online environment, software must be designed to withstand malicious attacks of all kinds. Unfortunately, even security-conscious products can fall prey when designers fail to understand the threats their software faces or the ways in which adversaries might try to attack it.
openaire   +1 more source

Threat Modeling of Cyber-Physical Systems - A Case Study of a Microgrid System

Computers and Security, 2023
Shaymaa Mamdouh Khalil, Hayretdin Bahsi, Tarmo Korotko   +2 more
exaly  

Modeling threats

IEEE Potentials, 2004
S. Singh, null Haiying Tu, J. Allanach, J. Areta, P. Willett, K. Pattipati   +5 more
openaire   +1 more source