ABC: A Cryptocurrency-Focused Threat Modeling Framework

Ghada Almashaqbeh, Allison Bishop, Justin Cappos

    Research output: Chapter in Book/Report/Conference proceedingConference contribution

    Abstract

    Cryptocurrencies are an emerging economic force, but there are concerns about their security. This is due, in part, to complex collusion cases and new threat vectors, that could be missed by conventional security assessment strategies. To address these issues, we propose ABC, an Asset-Based Cryptocurrency-focused threat modeling framework capable of identifying such risks. ABC's key innovation is the use of collusion matrices. A collusion matrix forces a threat model to cover a large space of threat cases while simultaneously manages this process to prevent it from being overly complex. We demonstrate that ABC is effective by presenting real-world use cases and by conducting a user study. The user study showed that around 71% of those who used ABC were able to identify financial security threats, as compared to only 13% of participants who used the popular framework STRIDE.

    Original languageEnglish (US)
    Title of host publicationINFOCOM 2019 - IEEE Conference on Computer Communications Workshops, INFOCOM WKSHPS 2019
    PublisherInstitute of Electrical and Electronics Engineers Inc.
    Pages859-864
    Number of pages6
    ISBN (Electronic)9781728118789
    DOIs
    StatePublished - Apr 2019
    Event2019 INFOCOM IEEE Conference on Computer Communications Workshops, INFOCOM WKSHPS 2019 - Paris, France
    Duration: Apr 29 2019May 2 2019

    Publication series

    NameINFOCOM 2019 - IEEE Conference on Computer Communications Workshops, INFOCOM WKSHPS 2019

    Conference

    Conference2019 INFOCOM IEEE Conference on Computer Communications Workshops, INFOCOM WKSHPS 2019
    CountryFrance
    CityParis
    Period4/29/195/2/19

    Fingerprint

    Innovation
    Economics
    Electronic money
    Threat
    Modeling
    Collusion
    User studies
    Financial security
    Assets

    ASJC Scopus subject areas

    • Hardware and Architecture
    • Signal Processing
    • Information Systems and Management
    • Safety, Risk, Reliability and Quality
    • Computer Networks and Communications

    Cite this

    Almashaqbeh, G., Bishop, A., & Cappos, J. (2019). ABC: A Cryptocurrency-Focused Threat Modeling Framework. In INFOCOM 2019 - IEEE Conference on Computer Communications Workshops, INFOCOM WKSHPS 2019 (pp. 859-864). [8845101] (INFOCOM 2019 - IEEE Conference on Computer Communications Workshops, INFOCOM WKSHPS 2019). Institute of Electrical and Electronics Engineers Inc.. https://doi.org/10.1109/INFCOMW.2019.8845101

    ABC : A Cryptocurrency-Focused Threat Modeling Framework. / Almashaqbeh, Ghada; Bishop, Allison; Cappos, Justin.

    INFOCOM 2019 - IEEE Conference on Computer Communications Workshops, INFOCOM WKSHPS 2019. Institute of Electrical and Electronics Engineers Inc., 2019. p. 859-864 8845101 (INFOCOM 2019 - IEEE Conference on Computer Communications Workshops, INFOCOM WKSHPS 2019).

    Research output: Chapter in Book/Report/Conference proceedingConference contribution

    Almashaqbeh, G, Bishop, A & Cappos, J 2019, ABC: A Cryptocurrency-Focused Threat Modeling Framework. in INFOCOM 2019 - IEEE Conference on Computer Communications Workshops, INFOCOM WKSHPS 2019., 8845101, INFOCOM 2019 - IEEE Conference on Computer Communications Workshops, INFOCOM WKSHPS 2019, Institute of Electrical and Electronics Engineers Inc., pp. 859-864, 2019 INFOCOM IEEE Conference on Computer Communications Workshops, INFOCOM WKSHPS 2019, Paris, France, 4/29/19. https://doi.org/10.1109/INFCOMW.2019.8845101
    Almashaqbeh G, Bishop A, Cappos J. ABC: A Cryptocurrency-Focused Threat Modeling Framework. In INFOCOM 2019 - IEEE Conference on Computer Communications Workshops, INFOCOM WKSHPS 2019. Institute of Electrical and Electronics Engineers Inc. 2019. p. 859-864. 8845101. (INFOCOM 2019 - IEEE Conference on Computer Communications Workshops, INFOCOM WKSHPS 2019). https://doi.org/10.1109/INFCOMW.2019.8845101
    Almashaqbeh, Ghada ; Bishop, Allison ; Cappos, Justin. / ABC : A Cryptocurrency-Focused Threat Modeling Framework. INFOCOM 2019 - IEEE Conference on Computer Communications Workshops, INFOCOM WKSHPS 2019. Institute of Electrical and Electronics Engineers Inc., 2019. pp. 859-864 (INFOCOM 2019 - IEEE Conference on Computer Communications Workshops, INFOCOM WKSHPS 2019).
    @inproceedings{c35b8d2ab9eb4335be54b4e43caa0643,
    title = "ABC: A Cryptocurrency-Focused Threat Modeling Framework",
    abstract = "Cryptocurrencies are an emerging economic force, but there are concerns about their security. This is due, in part, to complex collusion cases and new threat vectors, that could be missed by conventional security assessment strategies. To address these issues, we propose ABC, an Asset-Based Cryptocurrency-focused threat modeling framework capable of identifying such risks. ABC's key innovation is the use of collusion matrices. A collusion matrix forces a threat model to cover a large space of threat cases while simultaneously manages this process to prevent it from being overly complex. We demonstrate that ABC is effective by presenting real-world use cases and by conducting a user study. The user study showed that around 71{\%} of those who used ABC were able to identify financial security threats, as compared to only 13{\%} of participants who used the popular framework STRIDE.",
    author = "Ghada Almashaqbeh and Allison Bishop and Justin Cappos",
    year = "2019",
    month = "4",
    doi = "10.1109/INFCOMW.2019.8845101",
    language = "English (US)",
    series = "INFOCOM 2019 - IEEE Conference on Computer Communications Workshops, INFOCOM WKSHPS 2019",
    publisher = "Institute of Electrical and Electronics Engineers Inc.",
    pages = "859--864",
    booktitle = "INFOCOM 2019 - IEEE Conference on Computer Communications Workshops, INFOCOM WKSHPS 2019",

    }

    TY - GEN

    T1 - ABC

    T2 - A Cryptocurrency-Focused Threat Modeling Framework

    AU - Almashaqbeh, Ghada

    AU - Bishop, Allison

    AU - Cappos, Justin

    PY - 2019/4

    Y1 - 2019/4

    N2 - Cryptocurrencies are an emerging economic force, but there are concerns about their security. This is due, in part, to complex collusion cases and new threat vectors, that could be missed by conventional security assessment strategies. To address these issues, we propose ABC, an Asset-Based Cryptocurrency-focused threat modeling framework capable of identifying such risks. ABC's key innovation is the use of collusion matrices. A collusion matrix forces a threat model to cover a large space of threat cases while simultaneously manages this process to prevent it from being overly complex. We demonstrate that ABC is effective by presenting real-world use cases and by conducting a user study. The user study showed that around 71% of those who used ABC were able to identify financial security threats, as compared to only 13% of participants who used the popular framework STRIDE.

    AB - Cryptocurrencies are an emerging economic force, but there are concerns about their security. This is due, in part, to complex collusion cases and new threat vectors, that could be missed by conventional security assessment strategies. To address these issues, we propose ABC, an Asset-Based Cryptocurrency-focused threat modeling framework capable of identifying such risks. ABC's key innovation is the use of collusion matrices. A collusion matrix forces a threat model to cover a large space of threat cases while simultaneously manages this process to prevent it from being overly complex. We demonstrate that ABC is effective by presenting real-world use cases and by conducting a user study. The user study showed that around 71% of those who used ABC were able to identify financial security threats, as compared to only 13% of participants who used the popular framework STRIDE.

    UR - http://www.scopus.com/inward/record.url?scp=85073265639&partnerID=8YFLogxK

    UR - http://www.scopus.com/inward/citedby.url?scp=85073265639&partnerID=8YFLogxK

    U2 - 10.1109/INFCOMW.2019.8845101

    DO - 10.1109/INFCOMW.2019.8845101

    M3 - Conference contribution

    AN - SCOPUS:85073265639

    T3 - INFOCOM 2019 - IEEE Conference on Computer Communications Workshops, INFOCOM WKSHPS 2019

    SP - 859

    EP - 864

    BT - INFOCOM 2019 - IEEE Conference on Computer Communications Workshops, INFOCOM WKSHPS 2019

    PB - Institute of Electrical and Electronics Engineers Inc.

    ER -