김정현, 김승주, 조광수, 곽지원,

Vol. 35, No. 2, pp. 397-413, 4월. 2025
10.13089/JKIISC.2025.35.2.397, Full Text:
Keywords: Threat modeling, Threat risk modeling, cybersecurity, Security by Design, Security requirement
Abstract

The importance of threat modeling is increasingly recognized across various fields, including defense, space exploration, and the automotive industry. Threat modeling serves as a core technique of Security by Design (SbD), ensuring that security considerations are integrated throughout all stages of the system development lifecycle. This process is broadly divided into five stages, ranging from system abstraction to the derivation of security requirements. Each stage is guided by specific principles that must be strictly followed in the execution of activities and the creation of deliverables to ensure effectiveness. However, a review of recent threat modeling studies conducted by domestic researchers reveals that many of these principles are frequently overlooked. In this study, we redefine the definition of threat modeling, as well as the principles for stage-specific activities and deliverables, to establish a comprehensive evaluation framework. Using this framework, we reassess existing threat modeling studies conducted by domestic researchers and provide constructive critiques based on the redefined criteria. Finally, we propose directions for the future advancement of threat modeling research in South Korea, aiming to enhance the quality and impact of studies in this critical area.

Statistics
Cite this article