New AI tool automates threat modeling for cyber-physical systems

Researchers have developed SMSI, a novel pipeline that automates threat modeling for cyber-physical systems. This system translates architectural models into actionable security control recommendations by mapping system components to vulnerabilities, then to attack techniques, and finally to NIST 800-53 security controls. Experiments using a healthcare IoT gateway demonstrated that SecureBERT, a fine-tuned language model, performed best in linking vulnerabilities to attack techniques, highlighting the effectiveness of dense embeddings for automated security recommendations. AI

Summary written by gemini-2.5-flash-lite from 1 source. How we write summaries →

IMPACT Automates security control recommendations for cyber-physical systems, potentially improving efficiency and effectiveness of threat modeling.

RANK_REASON This is a research paper detailing a new automated threat modeling pipeline for cyber-physical systems.

Read on arXiv cs.AI →

• SMSI
• NIST 800-53
• NVD
• MITRE ATT&CK
• SecureBERT+
• Gemma-4 26B
• arXiv

• paper
• safety