为敏捷威胁建模重用企业架构存储库

Wenjun Xiong, Per Carlsson, Robert Lagerström
{"title":"为敏捷威胁建模重用企业架构存储库","authors":"Wenjun Xiong, Per Carlsson, Robert Lagerström","doi":"10.1109/EDOCW.2019.00031","DOIUrl":null,"url":null,"abstract":"Digitization has increased exposure and opened up for more cyber threats and attacks. To proactively handle this issue, enterprise modeling needs to include threat management during the design phase that considers antagonists, attack vectors, and damage domains. Agile methods are commonly adopted to efficiently develop and manage software and systems. This paper proposes to use an enterprise architecture repository to analyze not only shipped components but the overall architecture, to improve the traditional designs represented by legacy systems in the situated IT-landscape. It shows how the hidden structure method (with Design Structure Matrices) can be used to evaluate the enterprise architecture, and how it can contribute to agile development. Our case study uses an architectural descriptive language called ArchiMate for architecture modeling and shows how to predict the ripple effect in a damaging domain if an attacker's malicious components are operating within the network.","PeriodicalId":246655,"journal":{"name":"2019 IEEE 23rd International Enterprise Distributed Object Computing Workshop (EDOCW)","volume":"1 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2019-10-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"5","resultStr":"{\"title\":\"Re-using Enterprise Architecture Repositories for Agile Threat Modeling\",\"authors\":\"Wenjun Xiong, Per Carlsson, Robert Lagerström\",\"doi\":\"10.1109/EDOCW.2019.00031\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"Digitization has increased exposure and opened up for more cyber threats and attacks. To proactively handle this issue, enterprise modeling needs to include threat management during the design phase that considers antagonists, attack vectors, and damage domains. Agile methods are commonly adopted to efficiently develop and manage software and systems. This paper proposes to use an enterprise architecture repository to analyze not only shipped components but the overall architecture, to improve the traditional designs represented by legacy systems in the situated IT-landscape. It shows how the hidden structure method (with Design Structure Matrices) can be used to evaluate the enterprise architecture, and how it can contribute to agile development. Our case study uses an architectural descriptive language called ArchiMate for architecture modeling and shows how to predict the ripple effect in a damaging domain if an attacker's malicious components are operating within the network.\",\"PeriodicalId\":246655,\"journal\":{\"name\":\"2019 IEEE 23rd International Enterprise Distributed Object Computing Workshop (EDOCW)\",\"volume\":\"1 1\",\"pages\":\"0\"},\"PeriodicalIF\":0.0000,\"publicationDate\":\"2019-10-01\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"5\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"2019 IEEE 23rd International Enterprise Distributed Object Computing Workshop (EDOCW)\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://doi.org/10.1109/EDOCW.2019.00031\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"\",\"JCRName\":\"\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"2019 IEEE 23rd International Enterprise Distributed Object Computing Workshop (EDOCW)","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/EDOCW.2019.00031","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
引用次数: 5

摘要

数字化增加了暴露,并为更多的网络威胁和攻击打开了大门。为了主动处理这个问题,企业建模需要在设计阶段包括威胁管理,考虑对手、攻击向量和损害域。敏捷方法通常用于有效地开发和管理软件和系统。本文建议使用企业架构存储库不仅分析已交付的组件,而且分析整个架构,以改进现有it环境中遗留系统所代表的传统设计。它展示了如何使用隐藏结构方法(使用设计结构矩阵)来评估企业架构,以及它如何有助于敏捷开发。我们的案例研究使用一种称为ArchiMate的体系结构描述语言进行体系结构建模,并展示了如果攻击者的恶意组件在网络中操作,如何预测破坏性领域中的连锁反应。
本文章由计算机程序翻译,如有差异,请以英文原文为准。
Re-using Enterprise Architecture Repositories for Agile Threat Modeling
Digitization has increased exposure and opened up for more cyber threats and attacks. To proactively handle this issue, enterprise modeling needs to include threat management during the design phase that considers antagonists, attack vectors, and damage domains. Agile methods are commonly adopted to efficiently develop and manage software and systems. This paper proposes to use an enterprise architecture repository to analyze not only shipped components but the overall architecture, to improve the traditional designs represented by legacy systems in the situated IT-landscape. It shows how the hidden structure method (with Design Structure Matrices) can be used to evaluate the enterprise architecture, and how it can contribute to agile development. Our case study uses an architectural descriptive language called ArchiMate for architecture modeling and shows how to predict the ripple effect in a damaging domain if an attacker's malicious components are operating within the network.
求助全文
通过发布文献求助,成功后即可免费获取论文全文。 去求助
来源期刊
自引率
0.00%
发文量
0
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
确定
请完成安全验证×
copy
已复制链接
快去分享给好友吧!
我知道了
右上角分享
点击右上角分享
0
联系我们:info@booksci.cn Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。 Copyright © 2023 布克学术 All rights reserved.
京ICP备2023020795号-1
ghs 京公网安备 11010802042870号
Book学术文献互助
Book学术文献互助群
群 号:481959085
Book学术官方微信