This paper presents and discusses the current state of Graphical Security Models (GrSM), in
terms of four GrSM phases:(i) generation,(ii) representation,(iii) evaluation, and (iv) …

Attack trees are a well established and commonly used framework for security modeling.
They provide a readable and structured representation of possible attacks against a system …

Nowadays, IT infrastructures are involved in making innumerable aspects of our lives
convenient, starting with water or energy distribution systems, and ending with e-commerce …

Graphical security models constitute a well-known, user-friendly way to represent the
security of a system. These classes of models are used by security experts to identify …

Securing cyber-physical systems (CPS) and Internet of Things (IoT) systems requires the
identification of how interdependence among existing atomic vulnerabilities may be …

Performing a thorough security risk assessment of an organisation has always been
challenging, but with the increased reliance on outsourced and off-site third-party services …

A comprehensive cybersecurity evaluation of automotive on-board networks has become a
crucial antecedent to the commercial distribution of vehicles. However, the means to perform …

Ensuring security of complex systems is a difficult task that requires utilization of numerous
tools originating from various domains. Among those tools we find attack–defense trees, a …

In this tool demonstration paper we present the ADTool2. 0: an open-source software tool for
design, manipulation and analysis of attack trees. The tool supports ranking of attack …

Attack trees are a popular way to represent and evaluate potential security threats on
systems or infrastructures. The goal of this work is to provide a framework allowing to …