Bridging Two TARAs: Integrating MITRE CTSA/CRRA Prioritization into ISO/SAE...
summary
AutoTARA automates ISO/SAE 21434 TARA by combining Meta Attack Language (MAL) system models and VehicleLang simulation with MITRE TARA-style CTSA/CRRA prioritization and mapping to the MITRE ATT&CK ICS Matrix. The pipeline generates reproducible attack paths, concretizes steps with LLM-guided details, scores mitigations by utility-to-cost, and reports that chain-progressing approaches rise 65.9% → 80.5% while valid approaches grow 56 → 157 (×2.8).
AI-written summary · about
chapters (13)
- 0:00AutoAR introduction and motivation
- 1:58AutoAR’s approach foundations
- 3:45Differences between TARAs
- 4:25AutoAR’s four-stage workflow
- 5:27Stage 1: Asset extraction and scoring
- 6:10Stage 2: Attack path simulation
- 6:53Stage 3: Attack details verification
- 7:39Stage 4: Mitigations mapping and costs
- 8:00Evaluation with real attacks
- 9:23Expert survey results
- 10:06Comparison with prior studies
- 10:28Limitations and future work
- 11:08Conclusion
related talks
26mImproving Cybersecurity Posture with an AI Security Assistant
31mAdversary Emulation: Generating MITRE ATT&CK Technique Sequences
13mAPTGen: An Approach towards Generating Practical Dataset Labelled with Targeted...
27mGet Your Security Priorities Straight! How to Identify Workloads Und...
39mThe PR3TACK Initiative: Building the World’s First Preemptive Tactics & Countermeasures Knowledgebas
50mWhen Everything Is Critical, Nothing Is: ISA and Mitigation Prioritization
29mAttack Defense Graph Analysis for Supporting SOC and CSIRT Operations
50mUsing IAC to Accelerate Threat Modeling