NOTICE: Due to a lapse in annual appropriations, most of this website is not being updated. Learn more.
Form submissions will still be accepted but will not receive responses at this time. Sections of this site for programs using non-appropriated funds (such as NVLAP) or those that are excepted from the shutdown (such as CHIPS and NVD) will continue to be updated.
An official website of the United States government
Here’s how you know
Official websites use .gov
A .gov website belongs to an official government organization in the United States.
Secure .gov websites use HTTPS
A lock (
) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.
Towards a Systematic Threat Modeling Approach for Cyber-physical Systems
Published
Author(s)
Goncalo Martins, Sajal Bhatia, Xenofon Koutsoukos, Keith A. Stouffer, CheeYee Tang, Rick Candell
Abstract
Cyber-Physical Systems (CPS) are systems with seamless integration of physical, computational and networking components. These systems can potentially have an impact on the physical components, hence it is critical to safeguard them against a wide range of attacks. In this paper, it is argued that an effective approach to achieve this goal is to systematically identify the potential threats at the design phase of building such systems, commonly achieved via threat modeling. In this context, a tool to perform systematic analysis of threat modeling for CPS is proposed. A real-world wireless railway temperature monitoring system is used as a case study to validate the proposed approach. The threats identified in the system are subsequently mitigated using National Institute of Standards and Technology (NIST) standards.
Proceedings Title
2nd National Symposium on Resilient Critical Infrastructure (ISRCS 2015)
Martins, G.
, Bhatia, S.
, Koutsoukos, X.
, Stouffer, K.
, Tang, C.
and Candell, R.
(2015),
Towards a Systematic Threat Modeling Approach for Cyber-physical Systems, 2nd National Symposium on Resilient Critical Infrastructure (ISRCS 2015), Philadelphia, PA, US, [online], https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=919378
(Accessed October 2, 2025)