{"id":"https://openalex.org/W4415398834","doi":"https://doi.org/10.1109/etfa65518.2025.11205762","title":"Leveraging LLMs Towards Assistant-based Support for Industrial Threat Models","display_name":"Leveraging LLMs Towards Assistant-based Support for Industrial Threat Models","publication_year":2025,"publication_date":"2025-09-09","ids":{"openalex":"https://openalex.org/W4415398834","doi":"https://doi.org/10.1109/etfa65518.2025.11205762"},"language":null,"primary_location":{"id":"doi:10.1109/etfa65518.2025.11205762","is_oa":false,"landing_page_url":"https://doi.org/10.1109/etfa65518.2025.11205762","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE 30th International Conference on Emerging Technologies and Factory Automation (ETFA)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5010304086","display_name":"Enrico Fregnan","orcid":"https://orcid.org/0000-0002-6897-7665"},"institutions":[{"id":"https://openalex.org/I885143765","display_name":"ABB (Switzerland)","ror":"https://ror.org/00ks5vt51","country_code":"CH","type":"company","lineage":["https://openalex.org/I885143765"]}],"countries":["CH"],"is_corresponding":true,"raw_author_name":"Enrico Fregnan","raw_affiliation_strings":["ABB Schweiz AG,Corporate Research Center,Baden-Dättwil,Switzerland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"ABB Schweiz AG,Corporate Research Center,Baden-Dättwil,Switzerland","institution_ids":["https://openalex.org/I885143765"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5046708044","display_name":"Christian G\u00f6ttel","orcid":"https://orcid.org/0000-0002-4465-6197"},"institutions":[{"id":"https://openalex.org/I885143765","display_name":"ABB (Switzerland)","ror":"https://ror.org/00ks5vt51","country_code":"CH","type":"company","lineage":["https://openalex.org/I885143765"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Christian G\u00f6ttel","raw_affiliation_strings":["ABB Schweiz AG,Corporate Research Center,Baden-Dättwil,Switzerland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"ABB Schweiz AG,Corporate Research Center,Baden-Dättwil,Switzerland","institution_ids":["https://openalex.org/I885143765"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5076083780","display_name":"Balz Maag","orcid":"https://orcid.org/0000-0002-2925-4560"},"institutions":[{"id":"https://openalex.org/I885143765","display_name":"ABB (Switzerland)","ror":"https://ror.org/00ks5vt51","country_code":"CH","type":"company","lineage":["https://openalex.org/I885143765"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Balz Maag","raw_affiliation_strings":["ABB Schweiz AG,Corporate Research Center,Baden-Dättwil,Switzerland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"ABB Schweiz AG,Corporate Research Center,Baden-Dättwil,Switzerland","institution_ids":["https://openalex.org/I885143765"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5083732410","display_name":"Abdallah Dawoud","orcid":null},"institutions":[{"id":"https://openalex.org/I4210166982","display_name":"ABB (Germany)","ror":"https://ror.org/05yeg2858","country_code":"DE","type":"company","lineage":["https://openalex.org/I4210166982","https://openalex.org/I885143765"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Abdallah Dawoud","raw_affiliation_strings":["ABB AG,Corporate Research Center,Mannheim,Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"ABB AG,Corporate Research Center,Mannheim,Germany","institution_ids":["https://openalex.org/I4210166982"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5120084015","display_name":"Georgios Nakas","orcid":null},"institutions":[{"id":"https://openalex.org/I4210166982","display_name":"ABB (Germany)","ror":"https://ror.org/05yeg2858","country_code":"DE","type":"company","lineage":["https://openalex.org/I4210166982","https://openalex.org/I885143765"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Georgios Nakas","raw_affiliation_strings":["ABB AG,Corporate Research Center,Mannheim,Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"ABB AG,Corporate Research Center,Mannheim,Germany","institution_ids":["https://openalex.org/I4210166982"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5010304086"],"corresponding_institution_ids":["https://openalex.org/I885143765"],"apc_list":null,"apc_paid":null,"fwci":1.7778,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.89597117,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":95,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"8"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10703","display_name":"Business Process Modeling and Analysis","score":0.9441999793052673,"subfield":{"id":"https://openalex.org/subfields/1404","display_name":"Management Information Systems"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10703","display_name":"Business Process Modeling and Analysis","score":0.9441999793052673,"subfield":{"id":"https://openalex.org/subfields/1404","display_name":"Management Information Systems"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9272000193595886,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/focus","display_name":"Focus (optics)","score":0.4799000024795532},{"id":"https://openalex.org/keywords/reliability","display_name":"Reliability (semiconductor)","score":0.4763000011444092},{"id":"https://openalex.org/keywords/field","display_name":"Field (mathematics)","score":0.4672999978065491},{"id":"https://openalex.org/keywords/test","display_name":"Test (biology)","score":0.42800000309944153},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.3903000056743622},{"id":"https://openalex.org/keywords/threat-assessment","display_name":"Threat assessment","score":0.36039999127388},{"id":"https://openalex.org/keywords/threat-model","display_name":"Threat model","score":0.34470000863075256},{"id":"https://openalex.org/keywords/listing","display_name":"Listing (finance)","score":0.34459999203681946}],"concepts":[{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6624000072479248},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5321000218391418},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.4799000024795532},{"id":"https://openalex.org/C43214815","wikidata":"https://www.wikidata.org/wiki/Q7310987","display_name":"Reliability (semiconductor)","level":3,"score":0.4763000011444092},{"id":"https://openalex.org/C9652623","wikidata":"https://www.wikidata.org/wiki/Q190109","display_name":"Field (mathematics)","level":2,"score":0.4672999978065491},{"id":"https://openalex.org/C2777267654","wikidata":"https://www.wikidata.org/wiki/Q3519023","display_name":"Test (biology)","level":2,"score":0.42800000309944153},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.3903000056743622},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.385699987411499},{"id":"https://openalex.org/C2778868856","wikidata":"https://www.wikidata.org/wiki/Q18394273","display_name":"Threat assessment","level":2,"score":0.36039999127388},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.34470000863075256},{"id":"https://openalex.org/C2779820595","wikidata":"https://www.wikidata.org/wiki/Q798505","display_name":"Listing (finance)","level":2,"score":0.34459999203681946},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.33629998564720154},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.329800009727478},{"id":"https://openalex.org/C123657996","wikidata":"https://www.wikidata.org/wiki/Q12271","display_name":"Architecture","level":2,"score":0.328000009059906},{"id":"https://openalex.org/C31139447","wikidata":"https://www.wikidata.org/wiki/Q5380386","display_name":"Enterprise information security architecture","level":2,"score":0.3102000057697296},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.30149999260902405},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.28529998660087585},{"id":"https://openalex.org/C126831891","wikidata":"https://www.wikidata.org/wiki/Q221673","display_name":"Host (biology)","level":2,"score":0.2718000113964081},{"id":"https://openalex.org/C12174686","wikidata":"https://www.wikidata.org/wiki/Q1058438","display_name":"Risk assessment","level":2,"score":0.27070000767707825},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.26750001311302185},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.26249998807907104},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.2599000036716461},{"id":"https://openalex.org/C58328972","wikidata":"https://www.wikidata.org/wiki/Q184609","display_name":"Expert system","level":2,"score":0.2531000077724457}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/etfa65518.2025.11205762","is_oa":false,"landing_page_url":"https://doi.org/10.1109/etfa65518.2025.11205762","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE 30th International Conference on Emerging Technologies and Factory Automation (ETFA)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":14,"referenced_works":["https://openalex.org/W1996655273","https://openalex.org/W2081418638","https://openalex.org/W3001443755","https://openalex.org/W4205998058","https://openalex.org/W4206256378","https://openalex.org/W4252076394","https://openalex.org/W4378446959","https://openalex.org/W4385734161","https://openalex.org/W4389519254","https://openalex.org/W4391136507","https://openalex.org/W4391876619","https://openalex.org/W4402684073","https://openalex.org/W4407278824","https://openalex.org/W4414281281"],"related_works":[],"abstract_inverted_index":{"Threat":[0],"models":[1],"contribute":[2],"to":[3,25,39,77,100],"strengthen":[4],"the":[5,13,29,52,65,109,127,135,161,164,174,177,186,194],"security":[6],"of":[7,31,54,68,111,130,163,176,188,196],"an":[8,105,112,150],"enterprise":[9],"system":[10],"by":[11,167],"listing":[12],"cybersecurity":[14,55,120],"threats":[15],"that":[16],"might":[17],"affect":[18],"it":[19],"as":[20,22,119],"well":[21],"possible":[23],"mitigations":[24],"such":[26,118],"threats.":[27],"Given":[28],"importance":[30],"these":[32,47],"models,":[33],"different":[34],"tools":[35,48],"have":[36],"been":[37],"devised":[38],"support":[40],"creating":[41],"or":[42],"updating":[43],"threat":[44,85,107,170],"models.":[45,86],"However,":[46],"focus":[49],"mainly":[50],"on":[51,84,91,156],"needs":[53],"experts,":[56],"often":[57],"overlooking":[58],"non-expert":[59,82],"users.To":[60],"address":[61],"this":[62,69,124,131],"gap,":[63],"in":[64,115,126,192],"first":[66],"part":[67,129],"paper":[70],"we":[71,133],"present":[72],"a":[73,92],"chat-based":[74],"LLM":[75,136],"assistant":[76,88,137],"answer":[78],"both":[79],"expert":[80],"and":[81,95,141,148,179],"queries":[83],"The":[87],"is":[89,121],"based":[90],"microservice":[93],"architecture":[94],"uses":[96],"Retrieval-Augmented":[97],"Generation":[98],"(RAG)":[99],"extract":[101],"relevant":[102],"information":[103],"from":[104],"industrial":[106,198],"model.Guaranteeing":[108],"reliability":[110],"LLM\u2019s":[113],"answers":[114,165],"sensitive":[116],"fields":[117],"paramount.":[122],"For":[123],"reason,":[125],"second":[128],"paper,":[132],"evaluate":[134],"using":[138],"(i)":[139],"Bleu":[140],"Rouge":[142],"score":[143],"metrics,":[144],"(ii)":[145],"human":[146,178],"evaluation,":[147,154],"(iii)":[149],"automatic":[151,189],"LLM-as-a-judge":[152,180,190],"approach.The":[153],"conducted":[155],"275":[157],"test":[158],"cases,":[159],"confirms":[160],"accuracy":[162],"provided":[166],"our":[168],"LLM-based":[169,197],"model":[171],"assistant.":[172],"Additionally,":[173],"results":[175],"evaluations":[181],"are":[182],"consistent.":[183],"This":[184],"corroborates":[185],"effectiveness":[187],"methods":[191],"assessing":[193],"performance":[195],"solutions.":[199]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-05-22T09:01:20.584952","created_date":"2025-10-22T00:00:00"}