Threat modelling and attack simulation

Increased digitization makes cities increasingly vulnerable to cyber attacks, where computers are compromised by malicious actors in order to cause damage and disruption. The higher the degree of digitization, the more devastating the potential attacks. In order to mitigate cyber threats, vulnerabilities first need to be identified. This is generally very difficult, because it requires (i) a detailed understanding of the city-wide system architecture, and (ii) significant security expertise. 

The task can be significantly facilitated by dedicated engineering tool support in the form of threat modeling and attack simulation. Threat modeling supports requirement no 1 by documenting the design of the system architecture. Attack simulation supports requirement no 2 by automating the identification of vulnerabilities. The main goal is to do a feasibility study for a threat modeling and attack simulation approach specifically designed for large scaled complex system-of-systems.

This project has received further funding in the new project ' Threat Modeling and Attack Simulation'.