Threat analysis and risk assessment for cyber-physical systems based on physical architecture and asset-centric threat modeling

An apparatus for threat-modeling of an embedded system, comprising:

• a processor;
• and
• a memory, the processor is configured to execute instructions stored in the memory to:
• receive a design of the embedded system, the design comprising at least an execution component and a communications line;
• receive a first asset that is carried on the communication line;
• identify a bandwidth of the communication line as a second asset associated with the communication line;
• identify a first threat based on the first asset;
• identify a second threat based on the second asset;
• obtain an impact score associated with at least one of the first threat or the second threat;
• and
• output a threat report that includes the impact score.

A system for threat-modeling of an embedded system, comprising:

• a first processor configured to execute first instructions stored in a first memory to:
• receive a design of the embedded system, the design comprising components;
• identify respective assets associated with at least some of the components;
• identify respective threats based on the respective assets, wherein the respective threats include a first threat and a second threat;
• output a threat report that includes the respective threats and respective impact scores;
• receive an indication of a review of the first threat but not the second threat;
• receive a revised design of the design, wherein the revised design results in a removal of the first threat and the second threat;
• and
• output a revised threat report that does not include the second threat and includes the first threat.