<abstract xmlns="http://www.w3.org/1999/xhtml">

<p>In recent years, against the backdrop of the national high attention to cybersecurity, the implementation of grade protection systems has been vigorously carried out in various industries within the Internet+ environment. However, the construction of grade protection systems has gradually revealed several issues: network product providers have a weak security awareness and lack of secure development experiences, leading to systems often failing to meet their grade protection requirements; Grade protection evaluation is complex and tedious, consuming a significant amount of time and labor costs. To address the issues above, this paper proposes a construction method for grade protection systems based on STRIDE threat modeling: by establishing the correspondence between threats and grade protection requirements, threats are eliminated during the system development process while implementing the content of grade protection requirements; through the security verification of threat elimination, materials for grade protection evaluation are accumulated, and work reuse is leveraged to alleviate the workload of grade protection evaluation. Implementing this method can effectively promote the construction of grade protection systems.</p>
</abstract>

In recent years, against the backdrop of the national high attention to cybersecurity, the implementation of grade protection systems has been vigorously carried out in various industries within the Internet+ environment. However, the construction of grade protection systems has gradually revealed several issues: network product providers have a weak security awareness and lack of secure development experiences, leading to systems often failing to meet their grade protection requirements; Grade protection evaluation is complex and tedious, consuming a significant amount of time and labor costs. To address the issues above, this paper proposes a construction method for grade protection systems based on STRIDE threat modeling: by establishing the correspondence between threats and grade protection requirements, threats are eliminated during the system development process while implementing the content of grade protection requirements; through the security verification of threat elimination, materials for grade protection evaluation are accumulated, and work reuse is leveraged to alleviate the workload of grade protection evaluation. Implementing this method can effectively promote the construction of grade protection systems.

A Construction Method for Grade Protection System Based on STRIDE Threat Modeling

Applied Mathematics and Nonlinear Sciences

This work is licensed under the Creative Commons Attribution 4.0 International License.

In recent years, against the backdrop of the national high attention to cybersecurity, the implementation of grade protection systems has been vigorously...

A Construction Method for Grade Protection System Based on STRIDE Threat Modeling

Online veröffentlicht: 13. Juni 2024

Seitenbereich: -

Eingereicht: 14. Feb. 2024

Akzeptiert: 24. Apr. 2024

DOI: https://doi.org/10.2478/amns-2024-1488

Schlüsselwörter
Grade Protection 2.0, Threat Modeling, Evaluation, DFD

© 2024 Dan Zhao et al., published by Sciendo

This work is licensed under the Creative Commons Attribution 4.0 International License.

A Construction Method for Grade Protection System Based on STRIDE Threat Modeling

Online veröffentlicht: 13. Juni 2024

Seitenbereich: -

Eingereicht: 14. Feb. 2024

Akzeptiert: 24. Apr. 2024

DOI: https://doi.org/10.2478/amns-2024-1488

SchlüsselwörterGrade Protection 2.0, Threat Modeling, Evaluation, DFD

© 2024 Dan Zhao et al., published by Sciendo

This work is licensed under the Creative Commons Attribution 4.0 International License.

Schlüsselwörter
Grade Protection 2.0, Threat Modeling, Evaluation, DFD