A Structured Cyber Attack Representation Model based on the Diamond Model and Adversary States

Abstract

Threat modeling is essential for selecting effective cybersecurity measures to secure industrial control systems (ICS). However, in-depth cybersecurity knowledge is required to perform the process. The results can vary from one security analyst to the next, particularly concerning prioritizing cyber attack scenarios. Cyber attack scenarios should be represented using a structured model to reduce the dependency on analysts. This study proposes a new structured model that expresses cyber attack scenarios for ICSs. The suggested model is based on the Diamond model and can express adversarial behavior against a targeted system in a structured manner. As a result, it can represent structured cyber attack scenarios and reduce the dependency on analysts in threat modeling. This paper describes the details of the proposed model to eliminate personal judgment in threat modeling and presents the evaluation of the validity and effects of the model.