用于安全分析的数据流图的情境化
Contextualisation of Data Flow Diagrams for security analysis
摘要：
数据流图（DFD）对于用于后续威胁建模的草图系统是流行的。它们有限的语义使得对它们的推理变得困难，但丰富它们会危及它们的简单性和随后的易接受性。我们提出了一种方法，将它们与其他互补的可用性和需求模型的上下文中的设计级DFD的污染数据流的推理。我们说明了我们的方法，使用试点研究，其中污染的数据流被确定没有任何增强的DFD或其补充模型。
英文摘要：
Data flow diagrams (DFDs) are popular for sketching systems for subsequent threat modelling. Their limited semantics make reasoning about them difficult, but enriching them endangers their simplicity and subsequent ease of take up. We present an approach for reasoning about tainted data flows in design-level DFDs by putting them in context with other complementary usability and requirements models. We illustrate our approach using a pilot study, where tainted data flows were identified without any augmentations to either the DFD or its complementary models.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
