{"id":"https://openalex.org/W4405936299","doi":"https://doi.org/10.23919/cnsm62983.2024.10814632","title":"ThreatFinderAI: Automated Threat Modeling Applied to LLM System Integration","display_name":"ThreatFinderAI: Automated Threat Modeling Applied to LLM System Integration","publication_year":2024,"publication_date":"2024-10-28","ids":{"openalex":"https://openalex.org/W4405936299","doi":"https://doi.org/10.23919/cnsm62983.2024.10814632"},"language":"en","primary_location":{"id":"doi:10.23919/cnsm62983.2024.10814632","is_oa":false,"landing_page_url":"https://doi.org/10.23919/cnsm62983.2024.10814632","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 20th International Conference on Network and Service Management (CNSM)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5071602128","display_name":"Jan von der Assen","orcid":"https://orcid.org/0000-0002-0591-8887"},"institutions":[{"id":"https://openalex.org/I202697423","display_name":"University of Zurich","ror":"https://ror.org/02crff812","country_code":"CH","type":"education","lineage":["https://openalex.org/I202697423"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Jan Von der Assen","raw_affiliation_strings":["University of Zurich UZH,Communication Systems Group,Department of Informatics,Zürich,Switzerland,CH-8050"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Zurich UZH,Communication Systems Group,Department of Informatics,Zürich,Switzerland,CH-8050","institution_ids":["https://openalex.org/I202697423"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5048111522","display_name":"Alberto Huertas","orcid":null},"institutions":[{"id":"https://openalex.org/I202697423","display_name":"University of Zurich","ror":"https://ror.org/02crff812","country_code":"CH","type":"education","lineage":["https://openalex.org/I202697423"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Alberto Huertas","raw_affiliation_strings":["University of Zurich UZH,Communication Systems Group,Department of Informatics,Zürich,Switzerland,CH-8050"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Zurich UZH,Communication Systems Group,Department of Informatics,Zürich,Switzerland,CH-8050","institution_ids":["https://openalex.org/I202697423"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5094134621","display_name":"Jamo Sharif","orcid":null},"institutions":[{"id":"https://openalex.org/I202697423","display_name":"University of Zurich","ror":"https://ror.org/02crff812","country_code":"CH","type":"education","lineage":["https://openalex.org/I202697423"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Jamo Sharif","raw_affiliation_strings":["University of Zurich UZH,Communication Systems Group,Department of Informatics,Zürich,Switzerland,CH-8050"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Zurich UZH,Communication Systems Group,Department of Informatics,Zürich,Switzerland,CH-8050","institution_ids":["https://openalex.org/I202697423"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5057255986","display_name":"Chao Feng","orcid":"https://orcid.org/0000-0002-0672-1090"},"institutions":[{"id":"https://openalex.org/I202697423","display_name":"University of Zurich","ror":"https://ror.org/02crff812","country_code":"CH","type":"education","lineage":["https://openalex.org/I202697423"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Chao Feng","raw_affiliation_strings":["University of Zurich UZH,Communication Systems Group,Department of Informatics,Zürich,Switzerland,CH-8050"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Zurich UZH,Communication Systems Group,Department of Informatics,Zürich,Switzerland,CH-8050","institution_ids":["https://openalex.org/I202697423"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5070889566","display_name":"G\u00e9r\u00f4me Bovet","orcid":"https://orcid.org/0000-0002-4534-3483"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"G\u00e9r\u00f4me Bovet","raw_affiliation_strings":["Cyber-Defence Campus, Armasuisse Science & Technology,Thun,Switzerland,CH-3602"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cyber-Defence Campus, Armasuisse Science & Technology,Thun,Switzerland,CH-3602","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5033030418","display_name":"Burkhard Stiller","orcid":"https://orcid.org/0000-0002-7461-7463"},"institutions":[{"id":"https://openalex.org/I202697423","display_name":"University of Zurich","ror":"https://ror.org/02crff812","country_code":"CH","type":"education","lineage":["https://openalex.org/I202697423"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Burkhard Stiller","raw_affiliation_strings":["University of Zurich UZH,Communication Systems Group,Department of Informatics,Zürich,Switzerland,CH-8050"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Zurich UZH,Communication Systems Group,Department of Informatics,Zürich,Switzerland,CH-8050","institution_ids":["https://openalex.org/I202697423"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.1346,"has_fulltext":false,"cited_by_count":6,"citation_normalized_percentile":{"value":0.93462567,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":91,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"3"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9900000095367432,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.974399983882904,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6232526302337646},{"id":"https://openalex.org/keywords/systems-engineering","display_name":"Systems engineering","score":0.3539767265319824},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.3239694833755493},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.18033969402313232}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6232526302337646},{"id":"https://openalex.org/C201995342","wikidata":"https://www.wikidata.org/wiki/Q682496","display_name":"Systems engineering","level":1,"score":0.3539767265319824},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.3239694833755493},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.18033969402313232}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.23919/cnsm62983.2024.10814632","is_oa":false,"landing_page_url":"https://doi.org/10.23919/cnsm62983.2024.10814632","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 20th International Conference on Network and Service Management (CNSM)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/13","display_name":"Climate action","score":0.49000000953674316}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":4,"referenced_works":["https://openalex.org/W4392771733","https://openalex.org/W4402038118","https://openalex.org/W4402811537","https://openalex.org/W6850830318"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"Artificial":[0],"Intelligence":[1],"(AI)":[2],"is":[3,66,137,151],"a":[4,108,141],"rapidly":[5],"integrated":[6],"technology,":[7],"significantly":[8],"contributing":[9],"to":[10,50,160],"advancements":[11],"like":[12],"6G.":[13],"However,":[14],"its":[15],"swift":[16],"adoption":[17],"raises":[18],"considerable":[19],"security":[20],"concerns.":[21],"Large":[22],"Language":[23],"Models":[24],"(LLMs)":[25],"pose":[26],"risks":[27],"such":[28],"as":[29,53],"spear":[30],"phishing,":[31],"code":[32,36],"injections,":[33],"and":[34,68,86,99,103,116,125,164,167],"remote":[35],"execution.":[37],"Conventional":[38],"threat":[39,63,84,102,117,130],"modeling,":[40],"used":[41,159],"in":[42],"secure":[43],"software":[44],"development,":[45],"faces":[46],"challenges":[47],"when":[48],"applied":[49],"AI":[51,96,101,129],"systems,":[52],"existing":[54],"methodologies":[55],"are":[56],"designed":[57],"for":[58,112,128],"traditional":[59],"software.":[60],"Furthermore,":[61],"AI-specific":[62],"modeling":[64,85],"research":[65],"sparse":[67],"lacks":[69],"approaches":[70],"providing":[71],"practical":[72,165],"support":[73],"or":[74],"automation.":[75],"Thus,":[76],"this":[77],"demo":[78],"paper":[79],"presents":[80],"ThreatFinderAI,":[81],"an":[82],"asset-centric":[83],"risk":[87],"assessment":[88],"framework.":[89],"ThreatFinderAI":[90,136],"fulfills":[91],"seven":[92],"steps":[93],"aligned":[94],"with":[95],"system":[97],"design":[98],"transforms":[100],"control":[104],"knowledge":[105,110],"bases":[106],"into":[107],"queryable":[109],"graph":[111],"automated":[113],"asset":[114],"identification":[115],"elicitation.":[118],"It":[119],"also":[120],"proposes":[121],"business":[122],"impact":[123,131],"analysis":[124],"expert":[126],"estimates":[127],"quantification.":[132],"In":[133],"the":[134,154],"demonstration,":[135],"illustrated":[138],"by":[139],"securing":[140],"customer":[142],"care":[143],"application":[144],"relying":[145],"on":[146],"LLMs.":[147],"Through":[148],"this,":[149],"it":[150],"demonstrated":[152],"how":[153],"proposed":[155],"framework":[156],"can":[157],"be":[158],"identify":[161],"relevant":[162],"threats":[163],"countermeasures":[166],"communicate":[168],"strategic":[169],"risk.":[170]},"counts_by_year":[{"year":2026,"cited_by_count":5},{"year":2025,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}