Master Thesis Student - Comparative Evaluation of Attack-Surface Modelling Approaches

Comparative Evaluation of Attack-Surface Modelling Approaches

Introduction
Understanding how a complex system may be exposed to cyberattacks is an important challenge in cybersecurity architecture. But how can we represent and reason about such exposure before the system is actually built? In this thesis, you will explore different ways of modelling attack surfaces and their potential usefulness for architectural reasoning, working alongside TRATON's cybersecurity architecture team.

Background
Attack-surface modelling approaches differ in what they represent, such as interfaces, reachability, attacker assumptions and trust boundaries. Those differences influence the questions an architect can ask and the conclusions a model can support. Better understanding these strengths and limitations can inform future security architecture work.

Objective

Compare two existing attack-surface modelling approaches, focusing on their representations, reasoning capabilities, assumptions and limitations. Examine them using a small, technology-neutral example rather than a real vehicle design.

Job description

The thesis student will investigate and compare existing approaches for modelling and reasoning about cybersecurity attack surfaces, with particular interest in their potential usefulness for security architecture.

The work will include:
• Studying fundamental attack-surface concepts and relevant existing modelling approaches.
• Selecting and comparing two approaches, focusing on what they represent, their assumptions, reasoning capabilities and limitations.
• Examining the selected approaches using a small, illustrative distributed-system architecture.
• Analyzing the findings and discussing their potential implications for future vehicle-level security architecture work.

The thesis will focus on fundamental understanding and comparative analysis rather than developing a new modelling framework or analysing an actual vehicle architecture.
Depending on the student's interests and progress, additional aspects such as dynamic attack surfaces or further modelling approaches may be investigated.
The expected outcome is a master's thesis presenting the investigation, comparison, illustrative example and conclusions.

Education/program/focus

Master's student in Computer Science, Computer Engineering, Cybersecurity, Software Engineering or similar. Interest in system modelling, cybersecurity and analytical comparison is welcome.

Number of students: 1

Start date for the thesis work: [to be agreed]

Estimated time required: 20 weeks full-time (30 hp, subject to university confirmation)

Contact persons and supervisors

Marcus Lindner marcus.lindner@scania.com

Application:

Your application must include a CV, personal letter and transcript of grades

A background check might be conducted for this position. We are conducting interviews continuously and may close the recruitment earlier than the date specified.

Requisition ID: 34937

Number of Openings: 1.0

Part-time / Full-time: Full-time

Permanent / Temporary: Temporary

Country / Region: SE

Location(s):
Södertälje, SE, 151 38

Required Travel: 0%

Workplace: On-site