ISADM：一种集成STRIDE、ATT&CK和D3FEND的威胁建模模型用于对抗现实世界对手
ISADM: An Integrated STRIDE, ATT&CK, and D3FEND Model for Threat Modeling Against Real-world Adversaries
AI总结：
ISADM是一种整合STRIDE、ATT&CK和D3FEND的威胁建模方法，用于提升金融科技对现实世界对手的防御能力。
摘要：
金融科技日益增长的连接性、快速创新和对全球数字基础设施的依赖带来了重大的网络安全挑战。传统网络安全框架往往难以识别和优先考虑行业特定的漏洞，或适应不断演变的对手战术，尤其是在高度针对性的领域如金融科技中。为了解决这些差距，我们提出了ISADM（集成STRIDE-ATTACK-D3FEND威胁模型），一种应用于金融科技安全的新混合方法，整合了STRIDE的资产中心化威胁分类、MITRE ATTACK对现实世界对手行为的目录以及D3FEND对反制措施的结构化知识。ISADM采用基于频率的评分机制来量化对手战术、技术、程序（TTPs）的普遍性，从而建立一个主动、基于评分的风险评估和优先级框架。这种主动方法有助于将组织从被动防御策略转向关键资产的战略加固。我们通过行业相关的案例研究分析验证了ISADM，展示了该方法如何复制实际攻击模式并加强主动威胁建模，指导风险优先级和资源分配至最关键漏洞。总体而言，ISADM提供了一种全面的混合威胁建模方法，弥合了资产中心化和对手中心化分析之间的差距，为金融科技系统提供了更强的防御能力。强调现实验证突显了其在通过基于频率的、影响意识的优先级方案增强该领域网络安全态势方面的实际意义，该方案结合了经验攻击者数据与情境风险分析。
英文摘要：
FinTechs increasing connectivity, rapid innovation, and reliance on global digital infrastructures present significant cybersecurity challenges. Traditional cybersecurity frameworks often struggle to identify and prioritize sector-specific vulnerabilities or adapt to evolving adversary tactics, particularly in highly targeted sectors such as FinTech. To address these gaps, we propose ISADM (Integrated STRIDE-ATTACK-D3FEND Threat Model), a novel hybrid methodology applied to FinTech security that integrates STRIDE's asset-centric threat classification with MITRE ATTACK's catalog of real-world adversary behaviors and D3FEND's structured knowledge of countermeasures. ISADM employs a frequency-based scoring mechanism to quantify the prevalence of adversarial Tactics, Techniques, and Procedures (TTPs), enabling a proactive, score-driven risk assessment and prioritization framework. This proactive approach contributes to shifting organizations from reactive defense strategies toward the strategic fortification of critical assets. We validate ISADM through industry-relevant case study analyses, demonstrating how the approach replicates actual attack patterns and strengthens proactive threat modeling, guiding risk prioritization and resource allocation to the most critical vulnerabilities. Overall, ISADM offers a comprehensive hybrid threat modeling methodology that bridges asset-centric and adversary-centric analysis, providing FinTech systems with stronger defenses. The emphasis on real-world validation highlights its practical significance in enhancing the sector's cybersecurity posture through a frequency-informed, impact-aware prioritization scheme that combines empirical attacker data with contextual risk analysis.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
