| KEYWORD |
Threat modeling and analysis
keywords CYBERSECURITY, SECURITY, MODELS, ANALYSIS TOOLS
Reference persons DANIELE BRINGHENTI, RICCARDO SISTO, FULVIO VALENZA
Research Groups DAUIN - GR-03 - COMPUTER NETWORKS GROUP - NETGROUP
Description In modern computer networks, the variety and number of threats are constantly increasing, making detecting and preventing malicious activities a complex task. Networked distributed systems, which often include complex and interconnected components, are vulnerable to various attacks. These attacks can exploit system vulnerabilities, misconfigurations, and even human errors. Detecting all potential threats in such environments is a complex task that requires robust mechanisms capable of addressing not only known attack vectors but also emerging ones.
To effectively counteract these threats, it is essential to develop comprehensive detection mechanisms. Such mechanisms must be grounded in threat models that accurately reflect the intricate relationships among all components of distributed systems. These models should consider not only the system architecture but also the specific vulnerabilities that attackers could exploit, the potential pathways of intrusion, and the impact of various attacks. By mapping out these relationships, threat modeling provides a structured approach to understanding how different elements interact and where the system is most at risk.
At the Netgroup at the Politecnico di Torino, we are planning to work in this research field in the possible directions:
• improving existing threat models (e.g., enriching models to consider countermeasures, event probabilities, or time);
• defining threat models and analysis solutions for data sharing applications where the combination of shared data may create unexpected vulnerabilities;
• defining threat models and analysis solutions for service supply chains, including heterogeneous digital services.
Required skills Computer Networks, Cybersecurity, Java
Deadline 19/11/2025
PROPONI LA TUA CANDIDATURA