{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,28]],"date-time":"2025-03-28T01:00:04Z","timestamp":1743123604084,"version":"3.40.3"},"publisher-location":"Cham","reference-count":27,"publisher":"Springer Nature Switzerland","isbn-type":[{"type":"print","value":"9783031744426"},{"type":"electronic","value":"9783031744433"}],"license":[{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2024]]},"DOI":"10.1007\/978-3-031-74443-3_15","type":"book-chapter","created":{"date-parts":[[2024,12,19]],"date-time":"2024-12-19T20:02:25Z","timestamp":1734638545000},"page":"260-270","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["An Introduction to\u00a0Threat Modelling: Modelling Steps, Model Types, Benefits and\u00a0Challenges"],"prefix":"10.1007","author":[{"given":"Nitin","family":"Naik","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Paul","family":"Jenkins","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Paul","family":"Grace","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Dishita","family":"Naik","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Shaligram","family":"Prajapat","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jingping","family":"Song","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2024,12,20]]},"reference":[{"doi-asserted-by":"crossref","unstructured":"Alberts, C.J., Behrens, S.G., Pethia, R.D., Wilson, W.R.: Operationally critical threat, asset, and vulnerability evaluation (OCTAVE) framework, version 1.0 (1999)","key":"15_CR1","DOI":"10.21236\/ADA367718"},{"unstructured":"Avacadosys.com: Continuous threat modeling - benefits and challenges (2024). https:\/\/www.avocadosys.com\/continuous-threat-modeling-benefits-and-challenges\/","key":"15_CR2"},{"issue":"1","key":"15_CR3","doi-asserted-by":"publisher","first-page":"3","DOI":"10.1007\/s00766-010-0115-7","volume":"16","author":"M Deng","year":"2011","unstructured":"Deng, M., Wuyts, K., Scandariato, R., Preneel, B., Joosen, W.: A privacy threat analysis framework: supporting the elicitation and fulfillment of privacy requirements. Requirements Eng. 16(1), 3\u201332 (2011)","journal-title":"Requirements Eng."},{"unstructured":"Eccouncil.org: Cyber threat modeling (2024). https:\/\/www.eccouncil.org\/threat-modeling\/","key":"15_CR4"},{"unstructured":"Gonzalez, C.: Threat modeling: 5 steps, 7 techniques, and tips for success (2023). https:\/\/www.exabeam.com\/blog\/infosec-trends\/top-8-threat-modeling-methodologies-and-techniques\/","key":"15_CR5"},{"unstructured":"Kohnfelder, L., Garg, P.: The threats to our products (1999)","key":"15_CR6"},{"unstructured":"LeBlanc, D., Howard, M.: Writing secure code. Pearson Education (2002)","key":"15_CR7"},{"unstructured":"Linddun.com: LINDDUN privacy threat modelling: Identify privacy threats in software systems (2024). https:\/\/linddun.org\/threat-types\/","key":"15_CR8"},{"unstructured":"Linddun.com: LINDDUN: Privacy threat types (2024). https:\/\/linddun.org\/","key":"15_CR9"},{"unstructured":"Microsoft.com: The trouble with threat modeling (2007). https:\/\/www.microsoft.com\/en-us\/security\/blog\/2007\/09\/26\/the-trouble-with-threat-modeling\/","key":"15_CR10"},{"doi-asserted-by":"crossref","unstructured":"Naik, N., Grace, P., Jenkins, P.: An attack tree based risk analysis method for investigating attacks and facilitating their mitigations in self-sovereign identity. In: IEEE Symposium Series on Computational Intelligence (SSCI). IEEE (2021)","key":"15_CR11","DOI":"10.1109\/SSCI50451.2021.9659929"},{"key":"15_CR12","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2022.102808","volume":"120","author":"N Naik","year":"2022","unstructured":"Naik, N., Grace, P., Jenkins, P., Naik, K., Song, J.: An evaluation of potential attack surfaces based on attack tree modelling and risk matrix applied to self-sovereign identity. Comput. Secur. 120, 102808 (2022)","journal-title":"Comput. Secur."},{"unstructured":"Naik, N., Jenkins, P., Grace, P.: Cyberattack analysis based on attack tree with weighted average probability and risk of attack. In: UK Workshop on Computational Intelligence (UKCI). Springer (2022)","key":"15_CR13"},{"doi-asserted-by":"crossref","unstructured":"Naik, N., Jenkins, P., Grace, P., Naik, D., Prajapat, S., Song, J.: A comparative analysis of threat modelling methods: STRIDE, DREAD, VAST, PASTA, OCTAVE, and LINDDUN. In: The International Conference on Computing,Communication, Cybersecurity & AI(The C3AI 2024). Springer (2024)","key":"15_CR14","DOI":"10.36227\/techrxiv.173014171.11449253\/v1"},{"doi-asserted-by":"crossref","unstructured":"Naik, N., et al.: Analysing cyberattacks using attack tree and fuzzy rules. In: UK Workshop on Computational Intelligence (UKCI). Springer (2023)","key":"15_CR15","DOI":"10.1007\/978-3-031-47508-5_29"},{"doi-asserted-by":"crossref","unstructured":"Naik, N., et al.: Fuzzy attack tree: assessing cyberattack risk using attack tree and fuzzy logic. In: 2023 IEEE International Conference on ICT in Business Industry & Government (ICTBIG), pp.\u00a01\u20139. IEEE (2023)","key":"15_CR16","DOI":"10.1109\/ICTBIG59752.2023.10456309"},{"doi-asserted-by":"crossref","unstructured":"Naik, N., et al.: Cyberattack analysis utilising attack tree with weighted mean probability and risk of attack. In: UK Workshop on Computational Intelligence (UKCI). Springer (2023)","key":"15_CR17","DOI":"10.1007\/978-3-031-47508-5_28"},{"doi-asserted-by":"crossref","unstructured":"Naik, N., Jenkins, P., Grace, P., Song, J.: Comparing attack models for IT systems: lockheed martin\u2019s cyber kill chain, MITRE ATT &CK framework and diamond model. In: 2022 IEEE International Symposium on Systems Engineering (ISSE). IEEE (2022)","key":"15_CR18","DOI":"10.1109\/ISSE54508.2022.10005490"},{"unstructured":"Owasp.org: OWASP risk rating methodology (2024). https:\/\/owasp.org\/www-community\/OWASP_Risk_Rating_Methodology","key":"15_CR19"},{"key":"15_CR20","volume-title":"Threat Modeling: Designing for Security","author":"A Shostack","year":"2014","unstructured":"Shostack, A.: Threat Modeling: Designing for Security. Wiley, Hoboken (2014)"},{"unstructured":"Threatmodeler.com: The evolution of threat modeling (2016). https:\/\/threatmodeler.com\/evolution-of-threat-modeling\/","key":"15_CR21"},{"unstructured":"Threatmodeler.com: Threat modeling methodologies: What is VAST? (2018). https:\/\/threatmodeler.com\/threat-modeling-methodologies-vast\/","key":"15_CR22"},{"unstructured":"Threatmodeler.com: The ultimate guide to threat modeling (2024). https:\/\/threatmodeler.com\/the-ultimate-guide-to-threat-modeling\/","key":"15_CR23"},{"unstructured":"UcedaVlez, T.: What is PASTA threat modeling? why use PASTA? (2021). https:\/\/versprite.com\/blog\/what-is-pasta-threat-modeling\/","key":"15_CR24"},{"unstructured":"Versprite.com: Risk-based security threat modeling: 7-step process for risk analysis (2024). https:\/\/versprite.com\/security-resources\/risk-based-threat-modeling\/","key":"15_CR25"},{"unstructured":"Vijayan, J.: 7 threat modeling mistakes you\u2019re probably making (2018). https:\/\/www.csoonline.com\/article\/564539\/7-threat-modeling-mistakes-you-re-probably-making.html","key":"15_CR26"},{"unstructured":"Windriver.com: What is threat modeling? (2024). https:\/\/www.windriver.com\/solutions\/learning\/threat-modeling","key":"15_CR27"}],"container-title":["Lecture Notes in Networks and Systems","Contributions Presented at The International Conference on Computing, Communication, Cybersecurity and AI, July 3\u20134, 2024, London, UK"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-74443-3_15","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,12,19]],"date-time":"2024-12-19T20:05:20Z","timestamp":1734638720000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-74443-3_15"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024]]},"ISBN":["9783031744426","9783031744433"],"references-count":27,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-74443-3_15","relation":{},"ISSN":["2367-3370","2367-3389"],"issn-type":[{"type":"print","value":"2367-3370"},{"type":"electronic","value":"2367-3389"}],"subject":[],"published":{"date-parts":[[2024]]},"assertion":[{"value":"20 December 2024","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"C3AI","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"The International Conference on Computing, Communication, Cybersecurity & AI","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"London","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"United Kingdom","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2024","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"3 July 2024","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"4 July 2024","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"c3ai2024","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/www.thec3ai.com\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}