What question did this study set out to answer?

The central aim is to propose a methodology that integrates threat modeling with penetration testing for improved security in industrial control systems.

March 25, 2026Computers & SecurityOpen Access

Bridging Industrial Control Systems Design and Testing Through Threat Modeling-Driven Penetration Testing – A Microgrid Case Study

View Full Paper

Ask AI

Bookmark

Authors

SKShaymaa Mamdouh KhalilTallinn University of Technology HBHayretdin BahşiTallinn University of Technology TKTarmo KorõtkoTallinn University of Technology

Discussion

Member takes

Implication

Demonstrates a methodology connecting design and testing phases in microgrid cybersecurity, suggesting enhanced penetration test efficiency.

Key Points

The central aim is to propose a methodology that integrates threat modeling with penetration testing for improved security in industrial control systems.
Developed a nine-stage threat modeling-driven penetration testing methodology named BRIDGE.
Mapped MITRE ATT&CK for ICS techniques to STRIDE threat categories.
Applied the methodology in a real-world case study of a microgrid system.
Compared CVSS v4.0 and v3.1 in representing risks of ICS vulnerabilities.
Enhanced penetration test planning efficiency and effectiveness demonstrated in the microgrid case study.
Proposed methodology establishes a strong connection between design phase threat modeling and actual testing processes.
CVSS v4.0 offers a better representation of ICS vulnerabilities compared to v3.1.

Cite This Study

Khalil et al. (2026) studied this question.

synapsesocial.com/papers/69c37b81b34aaaeb1a67e002 https://doi.org/10.1016/j.cose.2026.104906

View Full Paper

Ask AI

Bookmark

Implication

Demonstrates a methodology connecting design and testing phases in microgrid cybersecurity, suggesting enhanced penetration test efficiency.

Bridging Industrial Control Systems Design and Testing Through Threat Modeling-Driven Penetration Testing – A Microgrid Case Study

Discussion

Member takes

Implication

Key Points

Cite This Study

Bridging Industrial Control Systems Design and Testing Through Threat Modeling-Driven Penetration Testing – A Microgrid Case Study

Discussion

Member takes

Implication

Key Points

Cite This Study

Also Consider

Also Consider