%0 Conference Proceedings %T A Role Modeling Based Approach for Cyber Threat Analysis %+ Lab-STICC_ENSTAB_ CACS_MOCS %A Drouot, Bastien %A Golra, Fahad R. %A Champeau, Joël %< avec comité de lecture %B MODELSWARD 2019 - 7th International Conference on Model-Driven Engineering and Software Development %C Prague, Czech Republic %Y Hammoudi %Y Slimane and Pires %Y Luís Ferreira and Selić %Y Bran %I Springer International Publishing %3 Communications in Computer and Information Science %P 76-100 %8 2019-02-20 %D 2019 %R 10.1007/978-3-030-37873-8_4 %K Cyber threat analysis %K DSML interoperability %K Model federation %K Role modeling %K Simulation %Z Engineering Sciences [physics]Conference papers %X Using DSMLs, the domain experts can express their models in a language that is relevant to the problem area. However, it also adds the complexity of interoperability between these languages, specially for application areas that encompass multiple domains. One such application area, Cyber Threat Analysis (CTA), is at the intersection of various domains that can evolve independently: system modeling, attacker modeling and threat description. In this paper, we present an approach to address CTA interoperability issues based on role modeling. The proposed language provides a mechanism to define shared semantics between DSMLs relative to the CTA. The concept of a role is central to our approach, presented as Role4All framework. These roles allow us to federate different DSMLs to generate an attacker’s viewpoint. Our approach is illustrated using a case study on the development of an attacker’s viewpoint based on the federation of multiple domain models. Interoperability between the domain models is crucial to apply dedicated algorithms and interpretations on the attacker’s viewpoint. We used this attacker viewpoint to simulate attacks on a system for security analysis. %G English %L hal-02461502 %U https://hal.science/hal-02461502 %~ UNIV-BREST %~ INSTITUT-TELECOM %~ ENSTA-BRETAGNE %~ CNRS %~ UNIV-UBS %~ ENSTA-BRETAGNE-STIC %~ ENIB %~ LAB-STICC %~ INSTITUTS-TELECOM