# Threat Modelling and Beyond-Novel Approaches to Cyber Secure the Smart Energy System
## 5 Threat Modeling
\begin{table}
\begin{tabular}{l l l l} \hline \hline
**Id** & **Title** & **Category** & **Description** \\ \hline
51 & Elevation by Changing the & Elevation Of & Gateway may be able to remotely execute code for \\  & Execution Flow in WAMS & Privilege & WAMS. \\
187 & PQM May be Subject to Elevation of & Elevation Of & Gateway may be able to remotely execute code for \\  & Privilege Using Remote Code & Privilege & PQM. \\  & Execution & & \\
230 & Data Flow MODBUS TCP IP Secure & Denial Of & An external agent interrupts data flowing across a \\  & Is Potentially Interrupted & Service & trust boundary in either direction. \\
353 & Data Flow IEEE C37.118 over IEC & Denial Of & An external agent interrupts data flowing across a \\  & 61850-8-1 Is Potentially Interrupted & Service & trust boundary in either direction. \\
478 & Data Flow IEEE C37.118 over IEC & Denial Of & An external agent interrupts data flowing across a \\  & 61850-8-1 Is Potentially Interrupted & Service & trust boundary in either direction. \\
593 & Data Flow MODBUS TCP IP Secure & Denial Of & An external agent interrupts data flowing across a \\  & Is Potentially Interrupted & Service & trust boundary in either direction. \\
597 & Spoofing the ESB Adaper Processd & Spoofing & ESB Adaper may be spoofed by an attacker and this \\
618 & Data Flow IEC 60870-5-104 Is & Denial Of & An external agent interrupts data flowing across a \\  & Potentially Interrupted & Service & trust boundary in either direction. \\
621 & Elevation by Changing the & Elevation Of & An attacker may pass data into RTU in order to \\  & Execution Flow in RTU & Privilege & change the flow of program execution within RTU to \\
640 & Data flowing sniffing across & Information & Data flowing across MODBUS TCP IP may be sniffed \\  & MODBUS TCP IP & Disclosure & by an attacker. Information may may be used to attack \\  & & & other parts of the system or simply be a disclosure of \\
647 & Elevation by Changing the & Elevation Of & RTU may be able to remotely execute code for PED. \\  & Execution Flow in PED & Privilege & An attacker may pass data into SCADA System in \\
661 & Elevation by Changing the & Elevation Of & An attacker may pass data into SCADA System in \\  & Execution Flow in SCADA System & Privilege & order to change the flow of program execution within \\
672 & Data Flow IEC 60870-5-104 Is & Denial Of & CAADA System to the attacker’s choosing. \\  & Potentially Interrupted & Service & trust boundary in either direction. \\
686 & Elevation by Changing the & Elevation Of & An attacker may pass data into RTU in order to \\  & Execution Flow in RTU & Privilege & change the flow of program execution within RTU to \\
857 & Elevation by Changing the & Elevation Of & An attacker may pass data into DCU in order to \\  & Execution Flow in DCU & Privilege & change the flow of program execution within DCU to \\
880 & Spoofing the In-house display & Spoofing & In-house display may be spoofed by an attacker and \\  & External Entity & this may lead to unauthorized access to Smart Meter. \\
903 & An adversary may block access to & Denial Of & An adversary may block access to the application or API hosted on In-house display through a denial \\  & In-house display through a denial & Service & API hosted on In-house display through a denial of \\  & of service attack & & service attack \\
1005 & An adversary may gain elevated & Elevation Of & If an application runs under a high-privileged account, \\  & privileges and execute malicious & Privilege & it may provide an opportunity for an adversary to \\  & code on HEMS host & gain elevated privileges and execute malicious code \\
1013 & An adversary may execute & Tampering & An adversary may launch malicious code into Heating \\  & unknown code on Heating/Cooling & and execute it \\
1028 & Potential Excessive Resource & Denial Of & Resource consumption attacks can be hard to deal \\  & Consumption for IoT Gateway or & Service & with, and there are times that it makes sense to let the \\  & Thermometer & & OS do the job. \\ \hline \hline \end{tabular}
\end{table}