{"id":"https://openalex.org/W2977950770","doi":"https://doi.org/10.1109/netsys.2019.8854524","title":"Application Threat Modeling and Automated VNF Selection for Mitigation using TOSCA","display_name":"Application Threat Modeling and Automated VNF Selection for Mitigation using TOSCA","publication_year":2019,"publication_date":"2019-03-01","ids":{"openalex":"https://openalex.org/W2977950770","doi":"https://doi.org/10.1109/netsys.2019.8854524","mag":"2977950770"},"language":"en","primary_location":{"id":"doi:10.1109/netsys.2019.8854524","is_oa":false,"landing_page_url":"https://doi.org/10.1109/netsys.2019.8854524","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2019 International Conference on Networked Systems (NetSys)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5108647149","display_name":"Karoline Saatkamp","orcid":null},"institutions":[{"id":"https://openalex.org/I100066346","display_name":"University of Stuttgart","ror":"https://ror.org/04vnq7t77","country_code":"DE","type":"education","lineage":["https://openalex.org/I100066346"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Karoline Saatkamp","raw_affiliation_strings":["Institute of Architecture of Application Systems, University of Stuttgart, Stuttgart, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Architecture of Application Systems, University of Stuttgart, Stuttgart, Germany","institution_ids":["https://openalex.org/I100066346"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5114026631","display_name":"C. Krieger","orcid":null},"institutions":[{"id":"https://openalex.org/I100066346","display_name":"University of Stuttgart","ror":"https://ror.org/04vnq7t77","country_code":"DE","type":"education","lineage":["https://openalex.org/I100066346"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Christoph Krieger","raw_affiliation_strings":["Institute of Architecture of Application Systems, University of Stuttgart, Stuttgart, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Architecture of Application Systems, University of Stuttgart, Stuttgart, Germany","institution_ids":["https://openalex.org/I100066346"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5028884505","display_name":"Frank Leymann","orcid":"https://orcid.org/0000-0002-9123-259X"},"institutions":[{"id":"https://openalex.org/I100066346","display_name":"University of Stuttgart","ror":"https://ror.org/04vnq7t77","country_code":"DE","type":"education","lineage":["https://openalex.org/I100066346"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Frank Leymann","raw_affiliation_strings":["Institute of Architecture of Application Systems, University of Stuttgart, Stuttgart, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Architecture of Application Systems, University of Stuttgart, Stuttgart, Germany","institution_ids":["https://openalex.org/I100066346"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5084036235","display_name":"Julian Sudendorf","orcid":null},"institutions":[{"id":"https://openalex.org/I100066346","display_name":"University of Stuttgart","ror":"https://ror.org/04vnq7t77","country_code":"DE","type":"education","lineage":["https://openalex.org/I100066346"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Julian Sudendorf","raw_affiliation_strings":["Institute of Architecture of Application Systems, University of Stuttgart, Stuttgart, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Architecture of Application Systems, University of Stuttgart, Stuttgart, Germany","institution_ids":["https://openalex.org/I100066346"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5020564781","display_name":"Michael Wurster","orcid":"https://orcid.org/0000-0001-8233-0924"},"institutions":[{"id":"https://openalex.org/I100066346","display_name":"University of Stuttgart","ror":"https://ror.org/04vnq7t77","country_code":"DE","type":"education","lineage":["https://openalex.org/I100066346"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Michael Wurster","raw_affiliation_strings":["Institute of Architecture of Application Systems, University of Stuttgart, Stuttgart, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Architecture of Application Systems, University of Stuttgart, Stuttgart, Germany","institution_ids":["https://openalex.org/I100066346"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I100066346"],"apc_list":null,"apc_paid":null,"fwci":0.2404,"has_fulltext":false,"cited_by_count":7,"citation_normalized_percentile":{"value":0.40369113,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8159189820289612},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.6641611456871033},{"id":"https://openalex.org/keywords/provisioning","display_name":"Provisioning","score":0.6585665345191956},{"id":"https://openalex.org/keywords/threat-model","display_name":"Threat model","score":0.5954371690750122},{"id":"https://openalex.org/keywords/orchestration","display_name":"Orchestration","score":0.5335023403167725},{"id":"https://openalex.org/keywords/flexibility","display_name":"Flexibility (engineering)","score":0.5075339078903198},{"id":"https://openalex.org/keywords/virtual-network","display_name":"Virtual network","score":0.48961931467056274},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.4733731150627136},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.4650458097457886},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.44358888268470764},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.42220497131347656},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.38595330715179443},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.1489192545413971}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8159189820289612},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.6641611456871033},{"id":"https://openalex.org/C172191483","wikidata":"https://www.wikidata.org/wiki/Q1071806","display_name":"Provisioning","level":2,"score":0.6585665345191956},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.5954371690750122},{"id":"https://openalex.org/C199168358","wikidata":"https://www.wikidata.org/wiki/Q3367000","display_name":"Orchestration","level":3,"score":0.5335023403167725},{"id":"https://openalex.org/C2780598303","wikidata":"https://www.wikidata.org/wiki/Q65921492","display_name":"Flexibility (engineering)","level":2,"score":0.5075339078903198},{"id":"https://openalex.org/C2776874963","wikidata":"https://www.wikidata.org/wiki/Q4112081","display_name":"Virtual network","level":2,"score":0.48961931467056274},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.4733731150627136},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.4650458097457886},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.44358888268470764},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.42220497131347656},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.38595330715179443},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.1489192545413971},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C558565934","wikidata":"https://www.wikidata.org/wiki/Q2743","display_name":"Musical","level":2,"score":0.0},{"id":"https://openalex.org/C153349607","wikidata":"https://www.wikidata.org/wiki/Q36649","display_name":"Visual arts","level":1,"score":0.0},{"id":"https://openalex.org/C142362112","wikidata":"https://www.wikidata.org/wiki/Q735","display_name":"Art","level":0,"score":0.0},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/netsys.2019.8854524","is_oa":false,"landing_page_url":"https://doi.org/10.1109/netsys.2019.8854524","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2019 International Conference on Networked Systems (NetSys)","raw_type":"proceedings-article"},{"id":"pmh:oai:informatik.uni-stuttgart.de:INPROC-2019-40","is_oa":false,"landing_page_url":"http://www2.informatik.uni-stuttgart.de/cgi-bin/NCSTRL/NCSTRL_view.pl?id=INPROC-2019-40&engl=1","pdf_url":null,"source":{"id":"https://openalex.org/S4306401306","display_name":"Fachbereich Informatik (University of Stuttgart)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I100066346","host_organization_name":"University of Stuttgart","host_organization_lineage":["https://openalex.org/I100066346"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"\\n In: 2019 International Conference on Networked Systems (NetSys), pp.\\n 1-6\\n","raw_type":"Text"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":31,"referenced_works":["https://openalex.org/W86922914","https://openalex.org/W142605719","https://openalex.org/W210139834","https://openalex.org/W970000760","https://openalex.org/W1491125612","https://openalex.org/W1506229097","https://openalex.org/W2002692737","https://openalex.org/W2014549795","https://openalex.org/W2034478217","https://openalex.org/W2038997366","https://openalex.org/W2063784951","https://openalex.org/W2063853968","https://openalex.org/W2116560806","https://openalex.org/W2126762719","https://openalex.org/W2339977849","https://openalex.org/W2398625864","https://openalex.org/W2404088799","https://openalex.org/W2410061976","https://openalex.org/W2587455697","https://openalex.org/W2620574432","https://openalex.org/W2694044524","https://openalex.org/W2765843193","https://openalex.org/W2789065137","https://openalex.org/W2793826868","https://openalex.org/W2793959163","https://openalex.org/W2895216609","https://openalex.org/W2911130966","https://openalex.org/W4250346387","https://openalex.org/W6712355431","https://openalex.org/W6712827137","https://openalex.org/W6755143138"],"related_works":["https://openalex.org/W79913212","https://openalex.org/W2094884983","https://openalex.org/W2378898096","https://openalex.org/W560952460","https://openalex.org/W2290927522","https://openalex.org/W4283579741","https://openalex.org/W3066706303","https://openalex.org/W2438177009","https://openalex.org/W2768673452","https://openalex.org/W2125150972"],"abstract_inverted_index":{"In":[0,43,164],"the":[1,8,14,34,47,59,81,84,119,124,130,139,161,180,201],"era":[2],"of":[3,5,10,83,128,192,200],"Internet":[4],"Things":[6],"(IoT)":[7],"interconnectedness":[9],"devices,":[11],"and":[12,37,70,86,108,117,126,142,184],"thus":[13,87],"need":[15],"to":[16,32,38,115,137,160],"protect":[17],"them":[18],"against":[19],"threats":[20],"increased.":[21],"The":[22,149,190],"widely":[23],"used":[24,31,136],"threat":[25,173],"modeling":[26,132,174,203],"method":[27],"STRIDE":[28,177],"can":[29,67,94,134],"be":[30,68,95,135],"identify":[33,116],"system's":[35],"vulnerabilities":[36],"determine":[39],"appropriate":[40],"mitigation":[41],"solutions.":[42],"connected":[44],"environments,":[45],"especially":[46],"network":[48,65,89,162],"layer":[49],"plays":[50],"a":[51,100,146,169],"critical":[52],"role":[53],"in":[54,99,145],"achieving":[55],"security.":[56],"Based":[57],"on":[58,72,176],"Network":[60,77],"Functions":[61,78],"Virtualization":[62],"(NFV)":[63],"concept,":[64],"functions":[66],"virtualized":[69],"provisioned":[71],"standard":[73,150],"IT":[74],"hardware.":[75],"Virtualized":[76],"(VNFs)":[79],"increase":[80],"flexibility":[82],"provisioning,":[85],"security":[88,121],"functions,":[90],"such":[91],"as":[92],"firewalls,":[93],"easily":[96],"deployed.":[97],"However,":[98],"complex":[101],"distributed":[102],"system":[103],"it":[104],"is":[105,195],"time-consuming,":[106],"error-prone,":[107],"for":[109,154,172],"application":[110],"architects":[111],"even":[112],"not":[113],"possible":[114],"provision":[118],"required":[120],"functions.":[122],"For":[123],"orchestration":[125],"management":[127],"applications":[129,156],"TOSCA":[131,187,202],"language":[133],"describe":[138],"application's":[140],"components":[141],"their":[143],"relations":[144],"deployment":[147,188],"model.":[148],"was":[151,158],"mainly":[152],"developed":[153],"cloud":[155],"but":[157],"extended":[159],"layer.":[163],"this":[165],"paper,":[166],"we":[167],"present":[168],"TOSCA-based":[170],"approach":[171,194],"based":[175],"that":[178],"facilitates":[179],"automated":[181],"VNF":[182],"selection":[183],"injection":[185],"into":[186],"models.":[189],"feasibility":[191],"our":[193],"validated":[196],"by":[197],"an":[198],"extension":[199],"tool":[204],"Winery.":[205]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":3},{"year":2021,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2019-10-10T00:00:00"}