Visualizing cyber attacks with misuse case maps

Abstract

Business processes require a supporting technical architecture enabling their realization. The secure design of this architecture has key importance in the future of the business; however there are not many notations which consider security issues and architectures together. Misuse case map is a diagrammatical notation that supports the depiction of system architecture, together with security vulnerabilities and their mitigations. It also enables the representation of intrusion scenarios through exploit paths. The diagrams can become quickly complex with the arising details of the system and the intrusion, thus tool support is a big step forward for spreading the use of these notations. This master thesis introduces jMUCMNav; an editor for misuse case maps based on the well tested and widely used use case map editor.