Logo des Repositoriums
 

The PASTA threat model implementation in the IoT development life cycle

Kurzanzeige
dc.contributor.authorWolf, Andreas
dc.contributor.authorSimopoulos, Dimitrios
dc.contributor.authorD'Avino, Luca
dc.contributor.authorSchwaiger, Patrick
dc.contributor.editorReussner, Ralf H.
dc.contributor.editorKoziolek, Anne
dc.contributor.editorHeinrich, Robert
dc.date.accessioned2021-01-27T13:33:14Z
dc.date.available2021-01-27T13:33:14Z
dc.date.issued2021
dc.description.abstractRecently, IoT usage has grown rapidly. Security risks are rising analogously, though. Our paper introduces an approach to identify and address security threats by applying the PASTA (Process for Attack Simulation and Threat Analysis) threat model to the IoT domain. By adapting PASTA, we optimize the threat analysis based on domain knowledge and specific needs of IoT. With integration of the PASTA results into the development process and the IoT software development life cycle, we reduce security risks. A prototype demonstrates the feasibility of the concept for security vulnerability reduction via an integrated DevSecOps toolchain.en
dc.identifier.doi10.18420/inf2020_111
dc.identifier.isbn978-3-88579-701-2
dc.identifier.pissn1617-5468
dc.identifier.urihttps://dl.gi.de/handle/20.500.12116/34700
dc.language.isoen
dc.publisherGesellschaft für Informatik, Bonn
dc.relation.ispartofINFORMATIK 2020
dc.relation.ispartofseriesLecture Notes in Informatics (LNI) - Proceedings, Volume P-307
dc.subjectInternet of Things
dc.subjectThreat Model
dc.subjectDevSecOps
dc.subjectCyber-Security
dc.subjectSecurity Testing
dc.titleThe PASTA threat model implementation in the IoT development life cycleen
gi.citation.endPage1204
gi.citation.startPage1195
gi.conference.date28. September - 2. Oktober 2020
gi.conference.locationKarlsruhe
gi.conference.sessiontitleWorkshop on Tools and Concepts for Communication and Networked Systems

Dateien

Originalbündel
1 - 1 von 1
Vorschaubild
Name:
C25-2.pdf
Größe:
421.78 KB
Format:
Adobe Portable Document Format
Herunterladen

Sammlungen

P307 - INFORMATIK 2020 - Back to the Future