{"id":"W3135014913","doi":"10.1016/j.sysarc.2021.102073","title":"Specification, detection, and treatment of STRIDE threats for software components: Modeling, formal methods, and tool support","year":2021,"lang":"en","type":"article","venue":"Journal of Systems Architecture","topic":"Safety Systems Engineering in Autonomy","field":"Engineering","cited_by":48,"is_retracted":false,"has_abstract":false,"ca_institutions":"Carleton University","funders":"","keywords":"Computer science; STRIDE; Software engineering; Software security assurance; Flexibility (engineering); Reuse; Formal specification; Formal methods; Context (archaeology); Specification language; Threat model; Component-based software engineering; Computer security; Software development; Software; Programming language; Information security; Security service","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.000341717,0.0001872092,0.0005008524,0.0001623439,0.00004940301,0.00003624921,0.0000629195,0.00009530668,0.000002489493],"category_scores_gemma":[0.00005459106,0.0001570343,0.0001079609,0.00009480288,0.00001740258,0.0001214989,0.00001365709,0.0001130684,2.028179e-7],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0001156134,"about_ca_system_score_gemma":0.00004331274,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.000007539207,"about_ca_topic_score_gemma":0.00000481751,"domain_scores_codex":[0.9987447,0.00004680218,0.0007549421,0.0001291253,0.0001437468,0.0001806852],"domain_scores_gemma":[0.9991262,0.0001652885,0.0001953689,0.0001872768,0.0002377916,0.00008809676],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"simulation_or_modeling","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.00007085223,0.00004276387,0.0006821224,0.0009963029,0.0005947314,0.0000160531,0.00162059,0.8468503,0.04568225,0.0001162492,0.00003491367,0.1032929],"study_design_scores_gemma":[0.008315736,0.001813689,0.007972742,0.001500535,0.0006429046,0.01204224,0.001748933,0.8204404,0.05775696,0.00106384,0.0855101,0.001192003],"study_design_candidate":"simulation_or_modeling","study_design_consensus":"simulation_or_modeling","genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.1642738,0.007140925,0.8275523,0.00002442165,0.0006151449,0.0003036519,0.00002812164,0.00004053055,0.00002115901],"genre_scores_gemma":[0.9187515,0.0003460665,0.08042584,0.000002496623,0.0003449458,0.00002677659,0.000006629524,0.00004236448,0.00005339977],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.7544777,"threshold_uncertainty_score":0.6403674,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.02681172154353578,"score_gpt":0.2654638147834343,"score_spread":0.2386520932398986,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}