面向对象的威胁建模方法

为提高软件设计的可信性，提出一种面向对象的威胁建模方法，不仅能够捕捉数据流中存在的威胁，而且能够捕捉控制流中存在的威胁。基于攻击路径，从成本效益角度更准确地评估威胁，根据评估结果制定缓和方案并确定优先级，应用缓和方案改进软件设计，有效地缓和威胁，增强系统安全性。实现一个面向对象的威胁建模工具，并以实例进行了验证。

Approach to Object Oriented Threat Modeling

To improve trustworthiness of software design, this paper presents an object oriented threat modeling approach. This approach captures not only threats existed in data flow, but also threats existed in control flow. To precisely evaluate threats, this approach adopts an attack path based evaluation method in terms of cost-effectiveness. According to the evaluation results, mitigation measures are designed and prioritized. Applying the mitigation measures to the design of software can effectively mitigate threats and enhance the security of applications. An object oriented threat modeling tool is implemented. A case study is given to demonstrate the approach.