{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,23]],"date-time":"2026-01-23T06:17:29Z","timestamp":1769149049986,"version":"3.49.0"},"publisher-location":"New York, NY, USA","reference-count":37,"publisher":"ACM","license":[{"start":{"date-parts":[[2020,11,9]],"date-time":"2020-11-09T00:00:00Z","timestamp":1604880000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2020,11,9]]},"DOI":"10.1145\/3411498.3419967","type":"proceedings-article","created":{"date-parts":[[2020,11,4]],"date-time":"2020-11-04T03:24:03Z","timestamp":1604460243000},"page":"13-24","source":"Crossref","is-referenced-by-count":10,"title":["Hazard Driven Threat Modelling for Cyber Physical Systems"],"prefix":"10.1145","author":[{"given":"Luca Maria","family":"Castiglione","sequence":"first","affiliation":[{"name":"Imperial College London, London, United Kingdom"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Emil C.","family":"Lupu","sequence":"additional","affiliation":[{"name":"Imperial College London, London, United Kingdom"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2020,11,9]]},"reference":[{"key":"e_1_3_2_2_1_1","unstructured":"Marshall Abrams and Joe Weiss. 2008. Malicious control system cyber security attack case study--Maroochy Water Services Australia. McLean VA: The MITRE Corporation (2008).  Marshall Abrams and Joe Weiss. 2008. Malicious control system cyber security attack case study--Maroochy Water Services Australia. McLean VA: The MITRE Corporation (2008)."},{"key":"e_1_3_2_2_2_1","volume-title":"11th {USENIX} Workshop on Offensive Technologies ({WOOT} 17).","author":"Belikovetsky Sofia"},{"key":"e_1_3_2_2_3_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICDCS.Workshops.2008.40"},{"key":"e_1_3_2_2_4_1","unstructured":"Defense Use Case. 2016. Analysis of the cyber attack on the Ukrainian power grid. Electricity Information Sharing and Analysis Center (E-ISAC) (2016).  Defense Use Case. 2016. Analysis of the cyber attack on the Ukrainian power grid. Electricity Information Sharing and Analysis Center (E-ISAC) (2016)."},{"key":"e_1_3_2_2_5_1","doi-asserted-by":"publisher","DOI":"10.1145\/3274694.3274745"},{"key":"e_1_3_2_2_6_1","unstructured":"Crowdstrike. 2020. 2020 Crowdstrike Global Threat Report. Report (2020).  Crowdstrike. 2020. 2020 Crowdstrike Global Threat Report. Report (2020)."},{"key":"e_1_3_2_2_7_1","volume-title":"Proc. Black Hat USA. 1--26","author":"Pinto Alessandro Di","year":"2018"},{"key":"e_1_3_2_2_9_1","unstructured":"Clifton A Ericson etalmbox. 2015. Hazard analysis techniques for system safety. John Wiley & Sons.  Clifton A Ericson et almbox. 2015. Hazard analysis techniques for system safety. John Wiley & Sons."},{"key":"e_1_3_2_2_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/3302509.3311047"},{"key":"e_1_3_2_2_12_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.jisa.2016.05.008"},{"key":"e_1_3_2_2_13_1","doi-asserted-by":"publisher","DOI":"10.23919\/ECC.2019.8795990"},{"key":"e_1_3_2_2_14_1","volume-title":"Proactive and Dynamic Network Defense","author":"Giraldo Jairo"},{"key":"e_1_3_2_2_15_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijcip.2015.08.003"},{"key":"e_1_3_2_2_16_1","unstructured":"Zhongyuan Hau John H Castellanos and Jianying Zhou. 2019. Evaluating Cascading Effects of Attacks on Resilience of Industrial Control Systems: A Design-Centric Modeling Approach. arXiv preprint arXiv:1905.03156 (2019).  Zhongyuan Hau John H Castellanos and Jianying Zhou. 2019. Evaluating Cascading Effects of Attacks on Resilience of Industrial Control Systems: A Design-Centric Modeling Approach. arXiv preprint arXiv:1905.03156 (2019)."},{"key":"e_1_3_2_2_17_1","volume-title":"28th {USENIX} Security Symposium ($$USENIX$$ Security 19). 1115--1132.","author":"Huang Bing"},{"key":"e_1_3_2_2_18_1","volume-title":"Extending Systems-Theoretic Safety Analyses for Coordination. STAMP Workshop ?17","author":"Johnson Kip","year":"2017"},{"key":"e_1_3_2_2_19_1","doi-asserted-by":"publisher","DOI":"10.23919\/ACC.2018.8430881"},{"key":"e_1_3_2_2_20_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2011.67"},{"key":"e_1_3_2_2_21_1","doi-asserted-by":"crossref","unstructured":"Nancy Leveson. 2011. Engineering a safer world: Systems thinking applied to safety. MIT press.  Nancy Leveson. 2011. Engineering a safer world: Systems thinking applied to safety. MIT press.","DOI":"10.7551\/mitpress\/8179.001.0001"},{"key":"e_1_3_2_2_22_1","unstructured":"N Leveson and J Thomas. 2019. STPA Handbook (2018).  N Leveson and J Thomas. 2019. STPA Handbook (2018)."},{"key":"e_1_3_2_2_23_1","doi-asserted-by":"publisher","DOI":"10.1109\/VNC48660.2019.9062783"},{"key":"e_1_3_2_2_24_1","first-page":"91","article-title":"Remote exploitation of an unaltered passenger vehicle","volume":"2015","author":"Miller Charlie","year":"2015","journal-title":"Black Hat USA"},{"key":"e_1_3_2_2_25_1","doi-asserted-by":"publisher","DOI":"10.1109\/TAC.2015.2498708"},{"key":"e_1_3_2_2_26_1","volume-title":"Proceedings of the workshop on the definition, evaluation, and exploitation of modelling and computing standards for Real-Time Embedded Systems. 1--3.","author":"Muhammad Naeem","year":"2009"},{"key":"e_1_3_2_2_27_1","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2016.2627033"},{"key":"e_1_3_2_2_28_1","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2015.2509994"},{"key":"e_1_3_2_2_29_1","doi-asserted-by":"publisher","DOI":"10.1145\/1180405.1180446"},{"key":"e_1_3_2_2_30_1","volume-title":"USENIX security symposium","author":"Ou Xinming"},{"key":"e_1_3_2_2_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/2898375.2898379"},{"key":"e_1_3_2_2_32_1","unstructured":"Alastair Ruddle David Ward Benjamin Weyl Sabir Idrees Yves Roudier Michael Friedewald Timo Leimbach Andreas Fuchs Sigrid G\u00fcrgens Olaf Henniger et almbox. 2009. Deliverable D2. 3: Security requirements for automotive on-board networks based on dark-side scenarios. In EVITA project.  Alastair Ruddle David Ward Benjamin Weyl Sabir Idrees Yves Roudier Michael Friedewald Timo Leimbach Andreas Fuchs Sigrid G\u00fcrgens Olaf Henniger et almbox. 2009. Deliverable D2. 3: Security requirements for automotive on-board networks based on dark-side scenarios. In EVITA project."},{"key":"e_1_3_2_2_33_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-0-387-75462-8_6"},{"key":"e_1_3_2_2_34_1","volume-title":"VB2018","author":"Slowik Joe","year":"2018"},{"key":"e_1_3_2_2_35_1","doi-asserted-by":"publisher","DOI":"10.1016\/0164-1212(91)90029-6"},{"key":"e_1_3_2_2_36_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACC.2010.5530638"},{"key":"e_1_3_2_2_37_1","doi-asserted-by":"crossref","unstructured":"John P Thomas IV. 2013. Extending and automating a systems-theoretic hazard analysis for requirements generation and analysis. Ph.D. Dissertation. Massachusetts Institute of Technology.  John P Thomas IV. 2013. Extending and automating a systems-theoretic hazard analysis for requirements generation and analysis. Ph.D. Dissertation. Massachusetts Institute of Technology.","DOI":"10.2172\/1044959"},{"key":"e_1_3_2_2_38_1","unstructured":"Tony UcedaVelez. 2012. Real World Threat ModelingUsing the PASTA Methodology. https:\/\/owasp.org\/www-pdf-archive\/AppSecEU2012_PASTA.pdf  Tony UcedaVelez. 2012. Real World Threat ModelingUsing the PASTA Methodology. https:\/\/owasp.org\/www-pdf-archive\/AppSecEU2012_PASTA.pdf"},{"key":"e_1_3_2_2_39_1","unstructured":"William E Young. 2014. STPA-SEC for cyber security mission assurance. Eng Syst. Div. Syst. Eng. Res. Lab (2014).  William E Young. 2014. STPA-SEC for cyber security mission assurance. Eng Syst. Div. Syst. Eng. Res. Lab (2014)."}],"event":{"name":"CCS '20: 2020 ACM SIGSAC Conference on Computer and Communications Security","location":"Virtual Event USA","acronym":"CCS '20","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2020 Joint Workshop on CPS&IoT Security and Privacy"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3411498.3419967","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3411498.3419967","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T21:31:41Z","timestamp":1750195901000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3411498.3419967"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,11,9]]},"references-count":37,"alternative-id":["10.1145\/3411498.3419967","10.1145\/3411498"],"URL":"https:\/\/doi.org\/10.1145\/3411498.3419967","relation":{},"subject":[],"published":{"date-parts":[[2020,11,9]]}}}