# Enhancing Cybersecurity Through Comprehensive Investigation of Data Flow-Based Attack Scenarios
## 3 Proposed Approach
### Methodology
#### 3.2.3 Impact Enumeration
Conceptualization, S.A.A. ; methodology, S.A.A. ; software, S.I. and A.D.-G.; validation, S.A.A. ; formal analysis, S.A.A. ; Investigation, S.A.A., S.I. and A.D.-G.; resources, S.A.A. ; data curation, S.A.A., S.I., and A.D.-G.; writing--original draft preparation, S.A.A. and S.I. ; writing--review and editing, S.A.A., S.I., A.D.-G., M.S. ([PERSON]) and M.S. ([PERSON]); visualization, S.A.A. ; supervision, S.A.A. ; project administration, S.A.A. ; funding acquisition, M.S. ([PERSON]) and M.S. ([PERSON]). All authors have read and agreed to the published version of the manuscript. This research was funded by the Swedish Foundation for Strategic Research through the Serendipity project and KKS SACSys Synergy project (Safe and Secure Adaptive Collaborative Systems, Grant No. 20190021)

The datasets generated and source code implemented during and/or analyzed in the current study are available at the following link, which is also referenced in the paper: https://tly/Rdfvr (accessed on 30 September 2024). The authors declare no conflicts of interest; the funders had no role in the design of the study, in the collection, analysis, or interpretation of data, in the writing of the manuscript, or in the decision to publish the results. The following abbreviations are used in this manuscript: \begin{tabular}{l l} API & Application Programming Interfaces \\ AGVs & Automated Guided Vehicles \\ CSRF & Cross-Site Request Forgery \\ CPS & Cyber-Physical System \\ DFD & Data Flow Diagram \\ GDPR & General Data Protection Regulation \\ IT & Information Technology \\ IoT & Internet of Things \\ PETs & Privacy-Enhancing Technologies \\ \end{tabular} 

## References

* [1] [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON] Cybersecurity and Smart Cities: Current Status and Future. In Proceedings of the 2023 IEEE International Conference on Emerging Trends in Engineering, Sciences and Technology (ICES&T), Bahawalpur, Pakistan, 9-11 January 2023; pp. 1-7. * [2] [PERSON]; [PERSON] Wearables and Cybersecurity: Navigating the Threat Landscape. In Proceedings of the 2024 2 nd International Conference on Sustainable Computing and Smart Systems (ICSCSS), Virtual, 10-12 July 2024; pp. 563-567. * [3] [PERSON]; [PERSON] Cyber Threat Modeling for Water and Wastewater Systems: Contextualizing STRIDE and DREAD with the Current Cyber Threat Landscape. In Proceedings of the 2024 Systems and Information Engineering Design Symposium (SIEDS), Charlottesville, VA, USA, 3 May 2024; pp. 301-306. * [4] [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON] A Comparative Risk Analysis on CyberShip System with STPA-Sec, STRIDE and CORAS. _arXiv_**2022**, arXiv:2212.10830. [CrossRef]
* [5] [PERSON]; [PERSON]; [PERSON] Threat modeling of industrial control systems: A systematic literature review. _Comput. Secur._**2024**, 136, 103543. [CrossRef]
* [6] [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON] GENICS: A Framework for Generating Attack Scenarios for Cybersecurity Exercises on Industrial Control Systems. _Appl. Sci._**2024**, 14, 768. [CrossRef]
* [7] [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON] Threat models for vulnerability analysis of IoT devices for Manipulation of Demand attacks. In Proceedings of the 2023 INIC Cybersecurity Conference (JNIC), Vigo, Spain, 21-23 June 2023; pp. 1-8. * [8] [PERSON]; [PERSON]; [PERSON] Identification of Attack Paths Using Kill Chain and Attack Graphs. In Proceedings of the NOMS 2022--2022 IEEE/IFIP Network Operations and Management Symposium, Budapest, Hungary, 25-29 April 2022; pp. 1-6. [PERSON]; [PERSON] _Analyzing Computer Security: A Threat/Vulnerability/Countermeasure Approach_; Prentice Hall Professional: Saddle River, NJ, USA, 2012. * [10] [PERSON]; [PERSON] _Threat Modeling_; Microsoft Press: Redmond, WA, USA, 2004. * [11] [PERSON]; [PERSON] _Writing Secure Code_; Pearson Education: Saddle River, NJ, USA, 2002. * [12] [PERSON] Microsoft SDL Threat Modelling Tool. _Netw. Secur._**2009**, _2009_, 15-18. [CrossRef]
* [13] [PERSON] Experiences Threat Modeling at Microsoft. _MODSEC@ MoDELS_**2008**, _2008_, 35.