2. Abstracts of published articles
Abstract of [
1
]: addressing cybersecurity aspects while designing systems is challenging. As our
systems increasingly rely on digital technology to perform, security and resilience aspects need
to be considered during the system design process. However, the integration of pertinent
information into the systems engineering lifecycle is not trivial, as it is characterized by
following verbose guidelines and documentation, and has no practical, model-based
methodology to support threat-aware design of systems. In this article, we address this gap by
presenting an integrative, model-based methodology to support the design and assessment of
systems' security aspects. We discuss the methodology's design, specifically with respect to
system development scenarios, and detail industrial case studies demonstrating the applicability
of the methodology.
Abstract of [
2
]: security threat and risk assessment of systems requires the integrated use of
information from multiple knowledge bases. Such use is typically carried out ad-hoc by security
experts in an unstructured manner. Also, this ad-hoc use of information often lacks foundations
that allow for rigorous, disciplined applications of policy enforcement and the establishment of
a well-integrated body of knowledge. This hinders organisational learning as well as the
maturation of the threat modelling discipline. In this article, we uncover a newly developed
extension of a state-of-the-art modelling tool that allows users to integrate and curate
securityrelated information from multiple knowledge bases. Specifically, we provide catalogues of
threats and security controls based on information from CAPEC, ATT&CK, and NIST
SP80053. We demonstrate the ability to curate security information using the designed solution. We
highlight the contribution to improving the communication of security information, including
the systematic mapping between user-defined security guidance and information derived from
knowledge bases. The solution is open source and relies on model-to-model transformations
and extendable threat and security control catalogues. Accordingly, the solution allows
prospective users to adapt the modelling environment to their needs as well as keep it current
with respect to evolving knowledge bases.