Relationship-based threat modeling
Stef Verreydt, Laurens Sion, Koen Yskout, Wouter Joosen · 2022
Threat modeling is a common technique for the systematic analysis of system designs to uncover security and privacy threats. Popular threat modeling techniques, however, currently only consider a very localized system context, which hinders the discovery of more complex attack scenarios that involve multiple interactions throughout a system. This may lead to the underestimation of threats that are not harmful by themselves but enable multiple other high-risk threats. Furthermore, current risk assessment approaches require stakeholders to take the system as a whole into account when providing inputs, which is tedious and error-prone.