A hybrid threat model for system-centric and attack-centric for effective security design in SDLC

Abstract

Threat modeling is an essential activity in the security development lifecycle. To provide security at the design phase of software development, Microsoft introduced threat modeling stride to identify the vulnerabilities and attacks of application. An efficient solution is necessary to deal with these issues in the software development life cycle. In this context, the paper focused on the analysis of threats and attack tree techniques that are traditionally available and frequently used. Automated Threat modeling enables to simulate attacks and visualized the existing vulnerabilities and misconfiguration. A hybrid model is proposed based on system-centric and attacker-centric to identify the threats in the software application during the software design phase. This model is built by STRIDE by defining security architecture and then analyzed the risks regarding its security characteristics and applied to its real application system. Our model is applied in a case study of the health center management system and shows a better result is identifying the threats and severity in the design phase. And also attack tree defines the stages of threats to understand the severity.

Keywords

Threat modeling attack tree software development vulnerabilities threats analysis tool STRIDE

Get full access to this article

View all access options for this article.

References

Ardi and

Shahmehri, Introducing vulnerability awareness to common criteria’s security targets, in: 2009 Fourth International Conference on Software Engineering Advances, IEEE, 2009, pp. 419–424. doi:10.1109/ICSEA.2009.67.

Banerjee and

S.K.

Pandey, Software security rules, SDLC perspective, 2009, Preprint 0911.0494.

Dhillon, Developer-driven threat modeling: Lessons learned in the trenches, IEEE Security & Privacy9(4) (2011), 41–47. doi:10.1109/MSP.2011.47.

Haque,

Keffeler and

Atkison, An evolutionary approach of attack graphs and attack trees: A survey of attack modeling, in: Proceedings of the International Conference on Security and Management (SAM), The Steering Committee of The World Congress in Computer Science, Computer Engineering and Applied Computing (WorldComp), 2017, pp. 224–229.

F.A.

Hayek, The use of knowledge in society, The American economic review35(4) (1945), 519–530.

Howard and

Lipner, The Security Development Lifecycle, Vol. 8, Microsoft Press, Redmond, 2006.

Kaur and

Kaur, Mitigation of SQL injection attacks using threat modeling, ACM SIGSOFT Software Engineering Notes39(6) (2014), 1–6. doi:10.1145/2674632.2674638.

Kaur and

Kaur, Mitigation of SQL injection vulnerability during development of web applications, International Journal of Web Science3(2) (2019), 104–129. doi:10.1504/IJWS.2019.102207.

Krishnan, A Hybrid Approach, 2017, to Threat Modelling.

10.

Maheshwari and

Prasanna, August. Integrating risk assessment and threat modeling within SDLC process, in: 2016 International Conference on Inventive Computation Technologies (ICICT), Vol. 1, IEEE, 2016, pp. 1–5.

11.

McGraw, Software security, IEEE Security & Privacy2(2) (2004), 80–83. doi:10.1109/MSECP.2004.1281254.

12.

Meinig,

M.I.

Sukmana,

K.A.

Torkura and

Meinel, Holistic strategy-based threat model for organizations, Procedia Computer Science151 (2019), 100–107. doi:10.1016/j.procs.2019.04.017.

13.

Myagmar,

A.J.

Lee and

Yurcik, Threat modeling as a basis for security requirements, in: Symposium on Requirements Engineering for Information Security (SREIS), 2005, pp. 1–8.

14.

M.A.

Nia,

Bahrak,

Kargahi and

Fabian, Detecting new generations of threats using attribute-based attack graphs, IET Information Security13(4) (2019), 293–303. doi:10.1049/iet-ifs.2018.5409.

15.

Pasandideh,

Gomes and

Maló, Improving attack trees analysis using petri net modeling of cyber-attacks, in: 2019 IEEE 28th International Symposium on Industrial Electronics (ISIE), IEEE, 2019, pp. 1644–1649. doi:10.1109/ISIE.2019.8781238.

16.

Preuveneers,

Berbers and

Bhatti, Best practices for software security: An overview, in: 2008 IEEE International Multitopic Conference, IEEE, 2008, pp. 169–173. doi:10.1109/INMIC.2008.4777730.

17.

Reza Esmaeili and

Soltani Esterabadi, Attack Analysis Methodologies, 2019.

18.

Saini,

Duan and

Paruchuri, Threat modeling using attack trees, Journal of Computing Sciences in Colleges23(4) (2008), 124–131. doi:10.5555/1352079.1352100.

19.

Scandariato,

Wuyts and

Joosen, A descriptive study of Microsoft’s threat modeling technique, Requirements Engineering20(2) (2015), 163–180. doi:10.1007/s00766-013-0195-2.

20.

Scholte,

Balzarotti and

Kirda, Have things changed now? An empirical study on input validation vulnerabilities in web applications, Computers & Security31(3) (2012), 344–356. doi:10.1016/j.cose.2011.12.013.

21.

Shostack, Experiences Threat Modeling at Microsoft. MODSEC@ MoDELS, 2008.

22.

Ur-Rehman,

Gondal,

Kamruzzuman and

Jolfaei, Vulnerability modelling for hybrid it systems, in: 2019 IEEE International Conference on Industrial Technology (ICIT), 2019, pp. 1186–1191. doi:10.1109/ICIT.2019.8755005.

23.

Venkatasen and

Mani, A risk-centric defensive architecture for threat modelling in e-government application, Electronic Government, an International Journal14(1) (2018), 16–31. doi:10.1504/EG.2018.089537.

24.

Yoo, Computing in everyday life: A call for research on experiential computing, MIS quarterly34 (2010), 213–231. doi:10.2307/20721425.