Reflections and Factors in Applying Threat Modelling Tools for Cybersecurity Certification in Critical Infrastructure
Year: 2026
Type: conference-paper
Abstract: The increasing digitalisation of critical infrastructure, such as railway, energy, maritime, and safety-critical IoT systems, demands robust cybersecurity assurance and compliance with evolving certification schemes. Threat modelling offers a structured approach to identifying, analysing, and mitigating potential security threats, but its application remains challenging. This paper presents findings from a cross-domain study on developing and deploying a Threat Modelling Framework (TMF) and associated tools, including ThreatSpider and OWASP Threat Dragon, to support the cybersecurity certification process. We gathered expectations from diverse stakeholders and applied the framework in multiple industrial use cases to identify challenges, lessons learned, and recommendations. The results highlight key obstacles such as incomplete data integration, limited automation, and usability barriers for non-experts, alongside emerging opportunities through AI-assisted analysis and semi-automated workflows. The study provides actionable insights for improving threat modelling practices, enhancing their alignment with certification requirements (e.g., IEC 62443 and CRA), and promoting responsible AI adoption in cybersecurity assessment for critical infrastructure systems.
Subfield: Information Systems
Field: Computer Science
Domain: Physical Sciences
Open Access status: gold
OpenAlex ID: W7161307707