New AI tool automates threat modeling for cyber-physical systems

Researchers have developed SMSI, a novel pipeline that automates threat modeling for cyber-physical systems. This system translates architectural models into actionable security control recommendations by mapping system components to vulnerabilities, then to attack techniques, and finally to NIST 800-53 security controls. Experiments using a healthcare IoT gateway demonstrated that SecureBERT, a fine-tuned language model, performed best in linking vulnerabilities to attack techniques, highlighting the effectiveness of dense embeddings for automated security recommendations. AI

影响 Automates security control recommendations for cyber-physical systems, potentially improving efficiency and effectiveness of threat modeling.

排序理由 This is a research paper detailing a new automated threat modeling pipeline for cyber-physical systems.

在 arXiv cs.AI 阅读 →

• arXiv
• Gemma-4 26B
• MITRE ATT&CK
• NIST 800-53
• SecureBERT+

• 论文
• 安全

AI 生成摘要 · Google Gemini · 来自 1 个来源。 我们如何撰写摘要 →