On the public citation graph
Experimental comparison of attack trees and misuse cases for security threat identification
0 signed · 152 inferred · view as graph
Inferred edges come from two machine sources: sweeps of open repository metadata (mostly SSRN and Zenodo), and a bulk OpenAlex citation snapshot. Every row below is labelled with the one it came from. Neither is a complete citation index — absence here is not evidence of absence.
Is this your work? Sign in with ORCID and put your name on the
claims that are yours.
Reference health. See whether every reference in this work resolves to a
known work and none has been retracted — and get a dated CiteStamped
badge you can embed.
What this work says
Outgoing claims: the papers this work cites, builds on, or argues with.
inferredcites →https://doi.org/10.1002/spip.291openalex-snapshot
Adopting a situational requirements engineering approach for the analysis of civil aviation security standards
inferredcites →https://doi.org/10.1007/11908883_6openalex-snapshot
Capturing Security Requirements in Business Processes Through a UML 2.0 Activity Diagrams Profile
inferredcites →https://doi.org/10.1007/3-540-45800-x_32openalex-snapshot
UMLsec: Extending UML for Secure Systems Development
inferredcites →https://doi.org/10.1007/3-540-45800-x_33openalex-snapshot
SecureUML: A UML-Based Modeling Language for Model-Driven Security
inferredcites →https://doi.org/10.1007/978-3-540-39648-2_22openalex-snapshot
Requirement Engineering Meets Security: A Case Study on Modelling Secure Electronic Transactions by VISA and Mastercard
inferredcites →https://doi.org/10.1007/978-3-540-73031-6_2openalex-snapshot
Comparing Goal Modelling Languages: An Experiment
inferredcites →https://doi.org/10.1007/978-3-540-73031-6_3openalex-snapshot
Automatically Generating Requirements from i* Models: Experiences with a Complex Airport Operations System
inferredcites →https://doi.org/10.1007/978-3-540-75563-0_29openalex-snapshot
A Comparison of Two Approaches to Safety Analysis Based on Use Cases
inferredcites →https://doi.org/10.1007/s00766-004-0194-4openalex-snapshot
Eliciting security requirements with misuse cases
inferredcites →https://doi.org/10.1016/0142-0496(94)90187-2openalex-snapshot
Fundamentals of computer security technology
inferredcites →https://doi.org/10.1016/j.csi.2005.01.003openalex-snapshot
Using a security requirements engineering methodology in practice: The compliance with the Italian data protection legislation
inferredcites →https://doi.org/10.1016/s0306-4379(02)00012-1openalex-snapshot
Towards requirements-driven information systems engineering: the Tropos project
inferredcites →https://doi.org/10.1016/s0898-1221(00)90203-7openalex-snapshot
Experimentation in software engineering: An introduction
inferredcites →https://doi.org/10.1109/32.345822openalex-snapshot
Specification and validation of a security policy model
inferredcites →https://doi.org/10.1109/3468.935052openalex-snapshot
DARPA Information Assurance Program dynamic defense experiment summary
inferredcites →https://doi.org/10.1109/52.976937openalex-snapshot
Correctness by construction: developing a commercial secure system
inferredcites →https://doi.org/10.1109/acsac.2000openalex-snapshot
Proceedings 16th Annual Computer Security Applications Conference (ACSAC'00)
inferredcites →https://doi.org/10.1109/ares.2007.78openalex-snapshot
Empirical and statistical analysis of risk analysis-driven techniques for threat management
inferredcites →https://doi.org/10.1109/csac.1999.816013openalex-snapshot
Using abuse case models for security requirements analysis
inferredcites →https://doi.org/10.1109/discex.2003.1194877openalex-snapshot
Lessons learned in using live red teams in IA experiments
inferredcites →https://doi.org/10.1109/icre.2002.1048506openalex-snapshot
Initial industrial experience of misuse cases in trade-off analysis
inferredcites →https://doi.org/10.1109/icre.2003.1232746openalex-snapshot
Security and privacy requirements analysis within a social setting
inferredcites →https://doi.org/10.1109/re.2004.54openalex-snapshot
Using abuse frames to bound the scope of security problems
inferredcites →https://doi.org/10.1109/re.2005.23openalex-snapshot
Do viewpoints lead to better conceptual models? An exploratory case study
inferredcites →https://doi.org/10.1109/re.2005.43openalex-snapshot
Modeling security requirements through ownership, permission and delegation
inferredcites →https://doi.org/10.1109/tse.2004.43openalex-snapshot
Evaluating the effect of a delegated versus centralized control style on the maintainability of object-oriented software
inferredcites →https://doi.org/10.1145/1082983.1083211openalex-snapshot
Matching attack patterns to security vulnerabilities in software-intensive system designs
inferredcites →https://doi.org/10.1145/291469.293165openalex-snapshot
From object-oriented to goal-oriented requirements analysis
inferredcites →https://doi.org/10.2307/249008openalex-snapshot
Perceived Usefulness, Perceived Ease of Use, and User Acceptance of Information Technology
inferredcites →https://doi.org/10.3233/978-1-60750-939-4-206openalex-snapshot
The CORAS approach for model-based risk management applied to a telemedicine service
inferredcites →https://doi.org/10.4135/9781036231200openalex-snapshot
How to Design and Report Experiments
inferredcites →https://doi.org/10.5220/0002579402870297openalex-snapshot
Towards an integration of Security Requirements into Business Process Modeling
inferredcites →https://doi.org/10.5381/jot.2003.2.1.c6openalex-snapshot
Engineering Security Requirements.
inferredcites →https://doi.org/10.5860/choice.38-3941openalex-snapshot
Secrets and lies: digital security in a networked world
inferredcites →https://doi.org/10.7551/mitpress/7549.001.0001openalex-snapshot
Social Modeling for Requirements Engineering
What points at this work
Incoming claims: where this work appears in other papers’ reference lists and arguments.
inferred← citeshttps://doi.org/10.1002/sec.591openalex-snapshot
Intelligent network security assessment with modeling and analysis of attack patterns
inferred← citeshttps://doi.org/10.1002/smr.2269openalex-snapshot
Toward ontology‐based risk management framework for software projects: An empirical study
inferred← citeshttps://doi.org/10.1007/978-3-030-00761-4_23openalex-snapshot
Two Architectural Threat Analysis Techniques Compared
inferred← citeshttps://doi.org/10.1007/978-3-030-01391-2_26openalex-snapshot
Design of an Empirical Study for Evaluating an Automatic Layout Tool
inferred← citeshttps://doi.org/10.1007/978-3-030-20618-5_16openalex-snapshot
Review-Based User Profiling: A Systematic Mapping Study
inferred← citeshttps://doi.org/10.1007/978-3-031-16011-0_5openalex-snapshot
Model-Based Security Assessment on the Design of a Patient-Centric Data Sharing Platform
inferred← citeshttps://doi.org/10.1007/978-3-031-40953-0_15openalex-snapshot
Analyzing Origins of Safety and Security Interactions Using Feared Events Trees and Multi-level Model
inferred← citeshttps://doi.org/10.1007/978-3-031-66326-0_8openalex-snapshot
Threat Modeling: A Rough Diamond or Fool’s Gold?
inferred← citeshttps://doi.org/10.1007/978-3-319-04298-5_10openalex-snapshot
Goal-Based Establishment of an Information Security Management System Compliant to ISO 27001
inferred← citeshttps://doi.org/10.1007/978-3-319-07452-8_13openalex-snapshot
ISMS-CORAS: A Structured Method for Establishing an ISO 27001 Compliant Information Security Management System
inferred← citeshttps://doi.org/10.1007/978-3-319-07452-8_2openalex-snapshot
Empirical Assessment of Security Requirements and Architecture: Lessons Learned
inferred← citeshttps://doi.org/10.1007/978-3-319-16101-3_7openalex-snapshot
The Role of Catalogues of Threats and Security Controls in Security Risk Assessment: An Empirical Study with ATM Professionals
inferred← citeshttps://doi.org/10.1007/978-3-319-16664-3_12openalex-snapshot
Supporting the Establishment of a Cloud-Specific ISMS According to ISO 27001 Using the Cloud System Analysis Pattern
inferred← citeshttps://doi.org/10.1007/978-3-319-45931-8_18openalex-snapshot
Combining Third Party Components Securely in Automotive Systems
inferred← citeshttps://doi.org/10.1007/978-3-319-48393-1_24openalex-snapshot
Using Attack-Defense Trees to Analyze Threats and Countermeasures in an ATM: A Case Study
inferred← citeshttps://doi.org/10.1007/978-3-319-54045-0_15openalex-snapshot
On the Equivalence Between Graphical and Tabular Representations for Security Risk Assessment
inferred← citeshttps://doi.org/10.1007/978-3-319-74860-3_9openalex-snapshot
New Directions in Attack Tree Research: Catching up with Industrial Needs
inferred← citeshttps://doi.org/10.1007/978-3-642-11747-3_9openalex-snapshot
Idea: Reusability of Threat Models – Two Approaches with an Experimental Evaluation
inferred← citeshttps://doi.org/10.1007/978-3-642-14192-8_24openalex-snapshot
Visualizing Cyber Attacks with Misuse Case Maps
inferred← citeshttps://doi.org/10.1007/978-3-642-16782-9_1openalex-snapshot
Comparing Two Techniques for Intrusion Visualization
inferred← citeshttps://doi.org/10.1007/978-3-642-16782-9_11openalex-snapshot
Adapting UML Activity Diagrams for Mobile Work Process Modelling: Experimental Comparison of Two Notation Alternatives
inferred← citeshttps://doi.org/10.1007/978-3-642-16825-3_23openalex-snapshot
Introducing Mitigation Use Cases to Enhance the Scope of Test Cases
inferred← citeshttps://doi.org/10.1007/978-3-642-17650-0_25openalex-snapshot
Experimental Threat Model Reuse with Misuse Case Diagrams
inferred← citeshttps://doi.org/10.1007/978-3-642-21759-3_23openalex-snapshot
Adapted UML Activity Diagrams for Mobile Work Processes: Experimental Comparison of Colour and Pattern Fills
inferred← citeshttps://doi.org/10.1007/978-3-642-29578-2_10openalex-snapshot
HARM: Hacker Attack Representation Method
inferred← citeshttps://doi.org/10.1007/978-3-642-34210-3_7openalex-snapshot
How to Select a Security Requirements Method? A Comparative Study with Students and Practitioners
inferred← citeshttps://doi.org/10.1007/978-3-642-36285-9_62openalex-snapshot
Identifying and Visualising Dependability Concerns – Applications to Business Process Management
inferred← citeshttps://doi.org/10.1007/978-3-642-55355-4_8openalex-snapshot
A Semiotic Approach for Guiding the Visualizing of Time and Space in Enterprise Models
inferred← citeshttps://doi.org/10.1007/978-981-95-7826-9_4openalex-snapshot
Keep it Simple, or Teach Them Logics: Attack-Defense Tree Perception by Laypeople
inferred← citeshttps://doi.org/10.1007/s00766-010-0115-7openalex-snapshot
A privacy threat analysis framework: supporting the elicitation and fulfillment of privacy requirements
inferred← citeshttps://doi.org/10.1007/s00766-013-0174-7openalex-snapshot
A pattern-based method for establishing a cloud-specific information security management system
inferred← citeshttps://doi.org/10.1007/s00766-013-0195-2openalex-snapshot
A descriptive study of Microsoft’s threat modeling technique
inferred← citeshttps://doi.org/10.1007/s10664-023-10321-yopenalex-snapshot
A new, evidence-based, theory for knowledge reuse in security risk analysis
inferred← citeshttps://doi.org/10.1007/s10664-026-10837-zopenalex-snapshot
Less is more: usefulness of data flow diagrams and large language models for security threat validation
inferred← citeshttps://doi.org/10.1016/b978-0-323-91943-2.00003-4openalex-snapshot
Fuzzy attack tree analysis of security threat assessment in an internet security system using algebraic t-norm and t-conorm
inferred← citeshttps://doi.org/10.1016/j.cose.2018.08.005openalex-snapshot
Evaluating practitioner cyber-security attack graph configuration preferences
inferred← citeshttps://doi.org/10.1016/j.cose.2023.103254openalex-snapshot
An empirical evaluation of the effectiveness of attack graphs and MITRE ATT&CK matrices in aiding cyber attack perception amongst decision-makers
inferred← citeshttps://doi.org/10.1016/j.cosrev.2014.07.001openalex-snapshot
DAG-based attack and defense modeling: Don’t miss the forest for the attack trees
inferred← citeshttps://doi.org/10.1016/j.cosrev.2019.100219openalex-snapshot
A review of attack graph and attack tree visual syntax in cyber security
inferred← citeshttps://doi.org/10.1016/j.csi.2010.01.006openalex-snapshot
A systematic review of security requirements engineering
inferred← citeshttps://doi.org/10.1016/j.entcs.2014.12.014openalex-snapshot
Exploiting Bayesian Networks for the Analysis of Combined Attack Trees
inferred← citeshttps://doi.org/10.1016/j.infsof.2010.05.007openalex-snapshot
Security requirements engineering framework for software product lines
inferred← citeshttps://doi.org/10.1016/j.infsof.2012.04.001openalex-snapshot
Evaluation of the Pattern-based method for Secure Development (PbSD): A controlled experiment
inferred← citeshttps://doi.org/10.1016/j.infsof.2013.10.004openalex-snapshot
Comparing attack trees and misuse cases in an industrial setting
inferred← citeshttps://doi.org/10.1016/j.infsof.2014.09.001openalex-snapshot
A comprehensive pattern-oriented approach to engineering security methodologies
inferred← citeshttps://doi.org/10.1016/j.infsof.2018.04.007openalex-snapshot
Modeling Security and Privacy Requirements: a Use Case-Driven Approach
inferred← citeshttps://doi.org/10.1016/j.infsof.2024.107469openalex-snapshot
Acceptance behavior theories and models in software engineering — A mapping study
inferred← citeshttps://doi.org/10.1016/j.jfoodeng.2014.05.014openalex-snapshot
A novel deployment of smart cold chain system using 2G-RFID-Sys
inferred← citeshttps://doi.org/10.1016/j.jss.2013.04.023openalex-snapshot
Countermeasure graphs for software security risk assessment: An action research
inferred← citeshttps://doi.org/10.1016/j.jss.2014.05.075openalex-snapshot
Empirical evaluation of a privacy-focused threat modeling methodology
inferred← citeshttps://doi.org/10.1016/j.jss.2015.02.040openalex-snapshot
Investigating security threats in architectural context: Experimental evaluations of misuse case maps
inferred← citeshttps://doi.org/10.1016/j.jss.2021.111003openalex-snapshot
Finding security threats that matter: Two industrial case studies
inferred← citeshttps://doi.org/10.1016/j.sysarc.2021.102073openalex-snapshot
Specification, detection, and treatment of STRIDE threats for software components: Modeling, formal methods, and tool support
inferred← citeshttps://doi.org/10.1016/j.vehcom.2017.02.008openalex-snapshot
Towards a systematic security evaluation of the automotive Bluetooth interface
inferred← citeshttps://doi.org/10.1049/iet-sen.2017.0144openalex-snapshot
Requirements elicitation techniques: a systematic literature review based on the maturity of the techniques
inferred← citeshttps://doi.org/10.1080/2333696x.2008.10855837openalex-snapshot
Misuse Cases for Identifying System Dependability Threats
inferred← citeshttps://doi.org/10.1109/apsec66846.2025.00034openalex-snapshot
Empirical assessment of the perception of graphical threat model acceptability
inferred← citeshttps://doi.org/10.1109/ares.2009.23openalex-snapshot
Automated Support for Security Requirements Engineering in Software Product Line Domain Engineering
inferred← citeshttps://doi.org/10.1109/ares.2010.101openalex-snapshot
Combining Misuse Cases with Attack Trees and Security Activity Models
inferred← citeshttps://doi.org/10.1109/ares.2011.77openalex-snapshot
Experimental Comparison of Misuse Case Maps with Misuse Cases and System Architecture Diagrams for Eliciting Security Vulnerabilities and Mitigations
inferred← citeshttps://doi.org/10.1109/ccst.2011.6095897openalex-snapshot
Does appropriate software support for target identification exist?
inferred← citeshttps://doi.org/10.1109/csss.2011.5974593openalex-snapshot
A resource-based approach to extend UML diagrams for web applications
inferred← citeshttps://doi.org/10.1109/empire.2014.6890113openalex-snapshot
An experiment on comparing textual vs. visual industrial methods for security risk assessment
inferred← citeshttps://doi.org/10.1109/empire.2014.6890114openalex-snapshot
Security requirement elicitation techniques: The comparison of misuse cases and issue based information systems
inferred← citeshttps://doi.org/10.1109/empire.2015.7431304openalex-snapshot
Which security catalogue is better for novices?
inferred← citeshttps://doi.org/10.1109/esem.2013.29openalex-snapshot
An Experimental Comparison of Two Risk-Based Security Methods
inferred← citeshttps://doi.org/10.1109/esem.2013.59openalex-snapshot
Experimental Comparison of Two Safety Analysis Methods and Its Replication
inferred← citeshttps://doi.org/10.1109/icse-companion.2019.00037openalex-snapshot
MCP: A Security Testing Tool Driven by Requirements
inferred← citeshttps://doi.org/10.1109/icse.2017.55openalex-snapshot
How Good Is a Security Policy against Real Breaches? A HIPAA Case Study
inferred← citeshttps://doi.org/10.1109/icsea.2009.65openalex-snapshot
Identifying Security Requirements Hybrid Technique
inferred← citeshttps://doi.org/10.1109/ismvl.2011.12openalex-snapshot
Using Multiple-Valued Logic Decision Diagrams to Model System Threat Probabilities
inferred← citeshttps://doi.org/10.1109/issre.2018.00017openalex-snapshot
A Natural Language Programming Approach for Requirements-Based Security Testing
inferred← citeshttps://doi.org/10.1109/itng.2012.78openalex-snapshot
Annotating Resources in Sequence Diagrams for Testing Web Security
inferred← citeshttps://doi.org/10.1109/re.2017.13openalex-snapshot
The Trouble with Security Requirements
inferred← citeshttps://doi.org/10.1109/re.2017.63openalex-snapshot
Crowd Sourcing the Creation of Personae Non Gratae for Requirements-Phase Threat Modeling
inferred← citeshttps://doi.org/10.1109/sccc.2015.7416581openalex-snapshot
Identifying emerging security concepts using software artifacts through an experimental case
inferred← citeshttps://doi.org/10.1109/sege.2018.8499431openalex-snapshot
Modeling Information Security Threats for Smart Grid Applications by Using Software Engineering and Risk Management
inferred← citeshttps://doi.org/10.1109/ssiri.2009.14openalex-snapshot
An Analysis for Understanding Software Security Requirement Methodologies
inferred← citeshttps://doi.org/10.1109/tifs.2017.2771238openalex-snapshot
An Empirical Evaluation of the Effectiveness of Attack Graphs and Fault Trees in Cyber-Attack Perception
inferred← citeshttps://doi.org/10.1109/trustcom.2012.38openalex-snapshot
A Lightweight Privacy Preserving Approach for Analyzing Communication Records to Prevent VoIP Attacks Using Toll Fraud as an Example
inferred← citeshttps://doi.org/10.1109/tse.2025.3573380openalex-snapshot
Privacy Impact Tree Analysis (PITA): A Tree-Based Privacy Threat Modeling Approach
inferred← citeshttps://doi.org/10.1111/exsy.13145openalex-snapshot
An effective points of interest recommendation approach based on embedded meta‐path of spatiotemporal data
inferred← citeshttps://doi.org/10.1145/1842752.1842797openalex-snapshot
A comparison of software design security metrics
inferred← citeshttps://doi.org/10.1145/2601248.2601255openalex-snapshot
Controlled experiments comparing fault-tree-based safety analysis techniques
inferred← citeshttps://doi.org/10.1145/3278681.3278698openalex-snapshot
Towards an extended misuse case framework for elicitation of cloud dependability requirements
inferred← citeshttps://doi.org/10.1145/3289238openalex-snapshot
A Framework for Teaching Security Design Analysis Using Case Studies and the Hybrid Flipped Classroom
inferred← citeshttps://doi.org/10.1145/3376123openalex-snapshot
Attack and System Modeling Applied to IoT, Cloud, and Mobile Ecosystems
inferred← citeshttps://doi.org/10.1155/2014/506714openalex-snapshot
Security Threat Assessment of an Internet Security System Using Attack Tree and Vague Sets
inferred← citeshttps://doi.org/10.1155/2024/9962691openalex-snapshot
Mitigating Software Vulnerabilities through Secure Software Development with a Policy‐Driven Waterfall Model
inferred← citeshttps://doi.org/10.17586/2226-1494-2016-16-5-960-962openalex-snapshot
Probabilistic behavioral model for computer network protection based on attack trees
inferred← citeshttps://doi.org/10.19026/rjaset.8.1201openalex-snapshot
The Study of Available Techniques for Existing Requirements Engineering Challenges Based on Literature Review Evidences
inferred← citeshttps://doi.org/10.19153/cleiej.19.3.5openalex-snapshot
Software Development Initiatives to Identify and Mitigate Security Threats - Two Systematic Mapping Studies
inferred← citeshttps://doi.org/10.2139/ssrn.6182208openalex-snapshot
Theory Use in Software Engineering: A Systematic Mapping Study
inferred← citeshttps://doi.org/10.22360/springsim.2016.msm.014openalex-snapshot
Rigorous Modeling and Analysis of Interoperable Medical Devices
inferred← citeshttps://doi.org/10.3390/app10207253openalex-snapshot
Combining Machine Learning and Logical Reasoning to Improve Requirements Traceability Recovery
inferred← citeshttps://doi.org/10.3390/inventions4030053openalex-snapshot
Determining Information Security Threats for an IoT-Based Energy Internet by Adopting Software Engineering and Risk Management Approaches
inferred← citeshttps://doi.org/10.3390/systems12070238openalex-snapshot
Cyber Evaluation and Management Toolkit (CEMT): Face Validity of Model-Based Cybersecurity Decision Making
inferred← citeshttps://doi.org/10.35537/10915/4211openalex-snapshot
Elicitación y trazabilidad de requerimientos utilizando patrones de seguridad
inferred← citeshttps://doi.org/10.4018/978-1-4666-2958-5.ch013openalex-snapshot
Innovative Strategies for Secure Software Development
inferred← citeshttps://doi.org/10.4018/978-1-4666-4301-7.ch097openalex-snapshot
Innovative Strategies for Secure Software Development
inferred← citeshttps://doi.org/10.4018/978-1-60566-794-2.ch004openalex-snapshot
A Security Requirements Engineering Tool for Domain Engineering in Software Product Lines
inferred← citeshttps://doi.org/10.4018/978-1-61520-837-1.ch005openalex-snapshot
Security Over the Information Systems Development Cycle
inferred← citeshttps://doi.org/10.4018/ijismd.2014010101openalex-snapshot
An Experimental Comparison of System Diagrams and Textual Use Cases for the Identification of Safety Hazards
inferred← citeshttps://doi.org/10.4018/ijsse.2012010102openalex-snapshot
Improving Security and Safety Modelling with Failure Sequence Diagrams
inferred← citeshttps://doi.org/10.4018/jismd.2012070102openalex-snapshot
Capturing Location in Process Models
inferred← citeshttps://doi.org/10.4018/jsse.2010102004openalex-snapshot
Security Requirements Engineering for Evolving Software Systems
inferred← citeshttps://doi.org/10.4018/jsse.2012010101openalex-snapshot
Formative User-Centered Evaluation of Security Modeling
inferred← citeshttps://doi.org/10.4018/jsse.2012040101openalex-snapshot
Attribute Decoration of Attack–Defense Trees
inferred← citeshttps://doi.org/10.4018/jsse.2012040103openalex-snapshot
Comparing Misuse Case and Mal-Activity Diagrams for Modelling Social Engineering Attacks
inferred← citeshttps://doi.org/10.48550/arxiv.1910.03422openalex-snapshot
Finding Security Threats That Matter: An Industrial Case Study
inferred← citeshttps://doi.org/10.70675/5e26b2aaz6712z498fz9e40z503c5b63255bopenalex-snapshot
Ingénierie des sytèmes sécurisés : patrons, modèles et analyses
inferred← citeshttps://doi.org/10.70675/e57b3530z3b08z4894z8d51zfce477eed209openalex-snapshot
An approach to co-design and analysis of safety and security for three-layered system modeling : models, formalisms, and tool support
Editorial review for independent work. ICSAC — the Institute for Complexity
Science and Advanced Computing — runs a structured editorial panel for researchers
publishing outside journals, and publishes on CiteStamp rails. Submission is free
and goes through ORCID: icsacinstitute.org/submit.