AUTHOR(S): Ping Chen, Jingjing Hu, Zhitao Wu, Ruoting Xiong, Wei Ren
|
TITLE MergeTree: a Tree Model with Merged Nodes for Threat Induction |
ABSTRACT Threat tree model can clearly or- ganize threat induction information and thus is widely used for risk analysis in software assur- ance. Threat tree will grow to complicated struc- tures, e.g., the number of nodes and branches, when the threat information grows to a huge vol- ume. To extend the scalability of the threat tree model, we propose a tree model with merged n- odes so as to largely decrease the number of nodes and branches. The formal model and dedicated algorithms are proposed in details. The exper- imental results show the practicality of Merge- Tree. We also formally analyze the soundness and completeness of the proposed model. |
KEYWORDS Threat Tree, Semantics, Risk Analysis, Software Assurance |
|
Cite this paper Ping Chen, Jingjing Hu, Zhitao Wu, Ruoting Xiong, Wei Ren. (2022) MergeTree: a Tree Model with Merged Nodes for Threat Induction. International Journal of Mathematical and Computational Methods, 7, 75-79 |
|