## 2 Materials and Methods
### Theory of Threat Modeling
#### 2.4.6 Security Optimization Algorithm  
Protecting the network systems of big enterprises introduces a variety of major difficulties due to the complexity of the configurations. The management of these networks demands analysis techniques that are both robust and comprehensive. An administrator of a network needs to be aware of both the configurations that are susceptible to attacks and the technologies that can be used to protect the networks [30]. It is essential to provide sufficient security mechanisms to protect the system from multiple security issues. Today's technology suppliers are well aware of the significance of taking precautions to protect users' data, which is why there has been an increase in the number of security solutions available on the market [31]. However, due to the high cost of security measures, most customers choose the less expensive options rather than pay the additional cash for more robust versions. This cost can be quantified in cash for the security modules. However, additional overhead expenses are associated with performance and power consumption [32]. \begin{table}
\begin{tabular}{c p{142.3 pt}} \hline \hline
**Attribute** & **Description** \\ \hline Authentication & Verifying the identity of a user, process, or device \\ \hline Authorization & Dedicated management of roles and access right to allow access to resources on a target system. \\ \hline Input Validation & Input validation helps to ensure correct and accurate inputs and prevent attacks such as cross-site scripting and a variety of injection attacks. \\ \hline Input Sanitization & Input sanitization helps to correct invalid or security critical inputs to prevent potential injection attacks. \\ \hline Tamper Protection & Protection against physical attacks. \\ \hline Secure Boot & A method of securely booting the system with only OS relevant operations. No third party applications are executable. \\ \hline Encryption & Encrypting the data to prohibit information disclosure and to protect data confidentiality. \\ \hline DDoS Mitigation & Mechanisms to prohibit DDoS attacks. This means allowing only a certain amount of traffic, reducing the attack surface, defining firewall rules etc. \\ \hline Intrusion Detection & Applying network scanning tools, end-point protections, dedicated intrusion detection or prevention systems. \\ \hline \hline \end{tabular}
\end{table} 
Table 2: An excerpt of the proposed security attributes for system components [29]. In addition, there is a significant part played by security optimization, which involves doing an analysis of the security system of an organization, locating any vulnerabilities, and plugging them using appropriate security measures [33]. However, the main challenge lies in maintaining a high level of security within a particular system while simultaneously optimizing security measures without compromising the measures that have been optimized. [PERSON] et al. [30] presented a probabilistic graph model and algorithms for studying the security of complicated systems with the end goal of minimizing the chance of successful cyberattacks. This research was based on an optimization technique known as sequential linear programming, which has been extensively used and researched in a wide variety of engineering applications. During our investigation into this topic, we primarily focused on the outcomes of the threat analysis. These outcomes assist in deeply investigating the existing security issues that need more security solutions. Based on these findings, we determined common security attributes applied for system components that need to be optimized to maximize their resistance to the various kinds of threats currently present within systems' networks. Furthermore, we propose an optimization algorithm that examines each component in a system and aggregates security attributes, if applicable, in order to resist any attack propagation that could spread among multiple connected components within a particular network.