{"id":"https://openalex.org/W2973021057","doi":"https://doi.org/10.1109/access.2019.2940039","title":"A Systematic Approach to Threat Modeling and Security Analysis for Software Defined Networking","display_name":"A Systematic Approach to Threat Modeling and Security Analysis for Software Defined Networking","publication_year":2019,"publication_date":"2019-01-01","ids":{"openalex":"https://openalex.org/W2973021057","doi":"https://doi.org/10.1109/access.2019.2940039","mag":"2973021057"},"language":"en","primary_location":{"id":"doi:10.1109/access.2019.2940039","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2019.2940039","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/8600701/08827471.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://ieeexplore.ieee.org/ielx7/6287639/8600701/08827471.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5007095677","display_name":"Taehoon Eom","orcid":"https://orcid.org/0000-0001-5409-1567"},"institutions":[{"id":"https://openalex.org/I24456540","display_name":"Korea Aerospace University","ror":"https://ror.org/05jmm0651","country_code":"KR","type":"education","lineage":["https://openalex.org/I24456540"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Taehoon Eom","raw_affiliation_strings":["Department of Computer Engineering, Korea Aerospace University, Goyang, South Korea"],"raw_orcid":"https://orcid.org/0000-0001-5409-1567","affiliations":[{"raw_affiliation_string":"Department of Computer Engineering, Korea Aerospace University, Goyang, South Korea","institution_ids":["https://openalex.org/I24456540"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5011163136","display_name":"Jin B. Hong","orcid":"https://orcid.org/0000-0003-1359-3813"},"institutions":[{"id":"https://openalex.org/I177877127","display_name":"The University of Western Australia","ror":"https://ror.org/047272k79","country_code":"AU","type":"education","lineage":["https://openalex.org/I177877127"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Jin B. Hong","raw_affiliation_strings":["Department of Computer Science and Software Engineering, The University of Western Australia, Perth, WA, Australia"],"raw_orcid":"https://orcid.org/0000-0003-1359-3813","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Software Engineering, The University of Western Australia, Perth, WA, Australia","institution_ids":["https://openalex.org/I177877127"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5060344741","display_name":"Seongmo An","orcid":"https://orcid.org/0009-0006-1823-3162"},"institutions":[{"id":"https://openalex.org/I24456540","display_name":"Korea Aerospace University","ror":"https://ror.org/05jmm0651","country_code":"KR","type":"education","lineage":["https://openalex.org/I24456540"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Seongmo An","raw_affiliation_strings":["Department of Computer Engineering, Korea Aerospace University, Goyang, South Korea"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Engineering, Korea Aerospace University, Goyang, South Korea","institution_ids":["https://openalex.org/I24456540"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5065963028","display_name":"Jong Sou Park","orcid":null},"institutions":[{"id":"https://openalex.org/I24456540","display_name":"Korea Aerospace University","ror":"https://ror.org/05jmm0651","country_code":"KR","type":"education","lineage":["https://openalex.org/I24456540"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Jong Sou Park","raw_affiliation_strings":["Department of Computer Engineering, Korea Aerospace University, Goyang, South Korea"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Engineering, Korea Aerospace University, Goyang, South Korea","institution_ids":["https://openalex.org/I24456540"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5019789320","display_name":"Dong Seong Kim","orcid":"https://orcid.org/0000-0003-2605-187X"},"institutions":[{"id":"https://openalex.org/I160993911","display_name":"Queensland University of Technology","ror":"https://ror.org/03pnv4752","country_code":"AU","type":"education","lineage":["https://openalex.org/I160993911"]},{"id":"https://openalex.org/I165143802","display_name":"The University of Queensland","ror":"https://ror.org/00rqy9422","country_code":"AU","type":"education","lineage":["https://openalex.org/I165143802"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Dong Seong Kim","raw_affiliation_strings":["School of Information Technology and Electrical Engineering, The University of Queensland, Brisbane, QLD, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Information Technology and Electrical Engineering, The University of Queensland, Brisbane, QLD, Australia","institution_ids":["https://openalex.org/I160993911","https://openalex.org/I165143802"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":1.7757,"has_fulltext":true,"cited_by_count":24,"citation_normalized_percentile":{"value":0.86522042,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":"7","issue":null,"first_page":"137432","last_page":"137445"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9983999729156494,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9904999732971191,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8309712409973145},{"id":"https://openalex.org/keywords/software-defined-networking","display_name":"Software-defined networking","score":0.6580195426940918},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6511653065681458},{"id":"https://openalex.org/keywords/countermeasure","display_name":"Countermeasure","score":0.6294567584991455},{"id":"https://openalex.org/keywords/threat-model","display_name":"Threat model","score":0.48052772879600525},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.4716053605079651},{"id":"https://openalex.org/keywords/computer-security-model","display_name":"Computer security model","score":0.43169111013412476},{"id":"https://openalex.org/keywords/harm","display_name":"Harm","score":0.41957736015319824},{"id":"https://openalex.org/keywords/software-security-assurance","display_name":"Software security assurance","score":0.41554513573646545},{"id":"https://openalex.org/keywords/security-service","display_name":"Security service","score":0.41135379672050476},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.41001370549201965},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.2516234517097473},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.1868388056755066}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8309712409973145},{"id":"https://openalex.org/C77270119","wikidata":"https://www.wikidata.org/wiki/Q1655198","display_name":"Software-defined networking","level":2,"score":0.6580195426940918},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6511653065681458},{"id":"https://openalex.org/C21593369","wikidata":"https://www.wikidata.org/wiki/Q1032176","display_name":"Countermeasure","level":2,"score":0.6294567584991455},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.48052772879600525},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.4716053605079651},{"id":"https://openalex.org/C121822524","wikidata":"https://www.wikidata.org/wiki/Q5157582","display_name":"Computer security model","level":2,"score":0.43169111013412476},{"id":"https://openalex.org/C2777363581","wikidata":"https://www.wikidata.org/wiki/Q15098235","display_name":"Harm","level":2,"score":0.41957736015319824},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.41554513573646545},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.41135379672050476},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.41001370549201965},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.2516234517097473},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.1868388056755066},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.0},{"id":"https://openalex.org/C146978453","wikidata":"https://www.wikidata.org/wiki/Q3798668","display_name":"Aerospace engineering","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0}],"mesh":[],"locations_count":5,"locations":[{"id":"doi:10.1109/access.2019.2940039","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2019.2940039","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/8600701/08827471.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:pure.atira.dk:openaire/0ac557ad-87cd-4f67-9f60-1e7b091a69f8","is_oa":true,"landing_page_url":"https://admin.research-repository.uwa.edu.au/en/publications/0ac557ad-87cd-4f67-9f60-1e7b091a69f8","pdf_url":null,"source":{"id":"https://openalex.org/S4306402523","display_name":"UWA Profiles and Research Repository (University of Western Australia)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I177877127","host_organization_name":"The University of Western Australia","host_organization_lineage":["https://openalex.org/I177877127"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Eom, T, Hong, J, An, S, Park, J S & Kim, D S 2019, 'A Systematic Approach to Threat Modeling and Security Analysis for Software Defined Networking', IEEE Access, vol. 7, 8827471, pp. 137432-137445. https://doi.org/10.1109/ACCESS.2019.2940039","raw_type":"info:eu-repo/semantics/article"},{"id":"pmh:oai:doaj.org/article:5978dd81439640538a2eabdc37869c70","is_oa":true,"landing_page_url":"https://doaj.org/article/5978dd81439640538a2eabdc37869c70","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 7, Pp 137432-137445 (2019)","raw_type":"article"},{"id":"pmh:oai:espace.library.uq.edu.au:UQ:3a2fdbd","is_oa":false,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4306402388","display_name":"Queensland's institutional digital repository (The University of Queensland)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I165143802","host_organization_name":"The University of Queensland","host_organization_lineage":["https://openalex.org/I165143802"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Journal Article"},{"id":"pmh:oai:pure.atira.dk:publications/0ac557ad-87cd-4f67-9f60-1e7b091a69f8","is_oa":true,"landing_page_url":"http://www.scopus.com/inward/record.url?scp=85077966755&partnerID=8YFLogxK","pdf_url":null,"source":{"id":"https://openalex.org/S4306402523","display_name":"UWA Profiles and Research Repository (University of Western Australia)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I177877127","host_organization_name":"The University of Western Australia","host_organization_lineage":["https://openalex.org/I177877127"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Eom , T , Hong , J , An , S , Park , J S &amp; Kim , D S 2019 , ' A Systematic Approach to Threat Modeling and Security Analysis for Software Defined Networking ' , IEEE Access , vol. 7 , 8827471 , pp. 137432-137445 . https://doi.org/10.1109/ACCESS.2019.2940039","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2019.2940039","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2019.2940039","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/8600701/08827471.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2973021057.pdf","grobid_xml":"https://content.openalex.org/works/W2973021057.grobid-xml"},"referenced_works_count":44,"referenced_works":["https://openalex.org/W78267021","https://openalex.org/W158224344","https://openalex.org/W1807098818","https://openalex.org/W1932659185","https://openalex.org/W1984451560","https://openalex.org/W2019419295","https://openalex.org/W2022758041","https://openalex.org/W2031175798","https://openalex.org/W2040340473","https://openalex.org/W2042645728","https://openalex.org/W2043067467","https://openalex.org/W2055573977","https://openalex.org/W2067551786","https://openalex.org/W2077937403","https://openalex.org/W2094656022","https://openalex.org/W2110888135","https://openalex.org/W2120561608","https://openalex.org/W2146100293","https://openalex.org/W2155624544","https://openalex.org/W2156607688","https://openalex.org/W2293803746","https://openalex.org/W2402312219","https://openalex.org/W2515955240","https://openalex.org/W2533393212","https://openalex.org/W2564810971","https://openalex.org/W2580334929","https://openalex.org/W2599777545","https://openalex.org/W2601010787","https://openalex.org/W2606501539","https://openalex.org/W2612205004","https://openalex.org/W2735293538","https://openalex.org/W2736998749","https://openalex.org/W2765748406","https://openalex.org/W2766228646","https://openalex.org/W2783076686","https://openalex.org/W2808100463","https://openalex.org/W2808560727","https://openalex.org/W2891931318","https://openalex.org/W2894548787","https://openalex.org/W6606536520","https://openalex.org/W6638564739","https://openalex.org/W6674087999","https://openalex.org/W6682894363","https://openalex.org/W6736480050"],"related_works":["https://openalex.org/W2907868081","https://openalex.org/W2784006287","https://openalex.org/W2000428303","https://openalex.org/W2222589037","https://openalex.org/W4252804791","https://openalex.org/W2056275442","https://openalex.org/W2032098076","https://openalex.org/W2037791655","https://openalex.org/W2113932201","https://openalex.org/W2187486724"],"abstract_inverted_index":{"Software":[0],"Defined":[1],"Networking":[2],"(SDN)":[3],"extends":[4],"capabilities":[5],"of":[6,41,73,89,101,119,162,175,201],"existing":[7,28],"networks":[8],"by":[9],"providing":[10],"various":[11,54,191],"functionalities,":[12,35],"such":[13],"as":[14],"flexible":[15],"networking":[16],"controls.":[17],"However,":[18,59],"there":[19],"are":[20],"many":[21,47],"security":[22,71,88,99,117,126,159,170,174,184,192],"threat":[23],"vectors":[24],"in":[25,57],"SDN,":[26,195],"including":[27],"and":[29,65,114,146,155,189,199],"emerging":[30],"ones":[31],"arising":[32],"from":[33],"new":[34,169],"that":[36,181],"may":[37],"hinder":[38],"the":[39,77,87,98,116,182,197,202],"use":[40],"SDN.":[42,58,102,120,149,163,176],"To":[43],"tackle":[44],"this":[45,104],"problem,":[46],"countermeasures":[48,147],"have":[49],"been":[50],"developed":[51],"to":[52,67,85,96,111,142,172,194],"mitigate":[53],"threats":[55,154,193],"faced":[56],"their":[60,156],"effectiveness":[61],"must":[62],"be":[63],"analyzed":[64],"compared":[66],"fully":[68],"understand":[69],"how":[70],"posture":[72,100,118],"SDN":[74,90],"changes":[75],"when":[76],"countermeasure":[78],"is":[79],"adopted.":[80],"Also,":[81],"it":[82],"becomes":[83],"difficult":[84],"optimize":[86],"without":[91],"using":[92],"a":[93,108,123,139],"systematic":[94,140],"approach":[95,141],"evaluate":[97,143,190],"In":[103,164],"paper,":[105],"we":[106,166],"propose":[107],"novel":[109,124],"framework":[110,186],"systematically":[112],"model":[113,127],"analyze":[115],"We":[121],"develop":[122],"graphical":[125],"formalism":[128],"named":[129],"Threat":[130],"Vector":[131],"Hierarchical":[132],"Attack":[133],"Representation":[134],"Model":[135],"(TV-HARM),":[136],"which":[137],"provides":[138],"threats,":[144],"attacks":[145],"for":[148],"The":[150],"TV-HARM":[151],"captures":[152],"different":[153],"combinations,":[157],"enabling":[158],"risk":[160],"assessment":[161,185],"addition,":[165],"define":[167],"three":[168],"metrics":[171],"represent":[173],"Our":[177],"experimental":[178],"results":[179],"showed":[180],"proposed":[183,203],"can":[187],"capture":[188],"demonstrating":[196],"applicability":[198],"feasibility":[200],"framework.":[204]},"counts_by_year":[{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":6},{"year":2023,"cited_by_count":5},{"year":2022,"cited_by_count":7},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":2}],"updated_date":"2026-07-02T09:51:11.867554","created_date":"2025-10-10T00:00:00"}
