Approaches to Threat Modeling in the Creation of a Comprehensive Information Security System for a Multi-Level Intelligent Control Systems

The problem of modeling threats in the creation of a comprehensive information security system in multi-level intelligent control systems is considered. Existing approaches to creating a threat model are described. It is proposed to consider a multi-level intelligent control system as a type of automated system, according to the classification of Ukrainian normative documentation. The process of creating threat models for automated systems is analyzed.

To select the optimal methodology for creating a model in multilevel intelligent control systems, three methodologies (frameworks) that can be used for threat modeling were investigated: MITRE ATT&CK, Cyber Kill Chain by Lockheed Martin.

Based on a comparative analysis, the application of the MITRE ATT&CK methodology is justified as the most effective method for threat modeling in multilevel intelligent control systems.