著者

藤田 淳也 小倉 貴志 大河内 一弥 松本 典剛 澤田 賢治 金子 修

出版者

一般社団法人 電気学会

雑誌

電気学会論文誌C(電子・情報・システム部門誌) (ISSN:03854221)

巻号頁・発行日

vol.142, no.3, pp.328-338, 2022-03-01 (Released:2022-03-01)

参考文献数

25

被引用文献数

2

---

Threat modeling is a process to determine effective cybersecurity measures to secure industrial control systems (ICSs). However, deep cybersecurity knowledge is required to perform threat modeling processes and those results including prioritization of cyber attack scenarios are depended on security analysts. To reduce the dependency of analysts, it is required to express cyber attack scenarios with a structured model. In this study, a new structured model that expresses cyber attack scenarios for ICSs is proposed. The proposed model is based on the Diamond model and capable of expression behaviors of adversary in a targeted system by a structured form. The model makes it possible to express structured cyber attack scenarios and reduce dependency of analysts. This paper provides a detail of the proposed model and evaluation results of the model in terms of the usefulness of threat modeling.