Hybrid Model for Threat Analysis Enhanced by LLM: Integrating MITRE ATT&CK for Cyber-Physical System Security = AI-Augmented TAMELESS: Integrating MITRE ATT&CK and System Enhancements for Threat Analysis in Cyber-Physical Systems

Vittorio Sanfilippo

Hybrid Model for Threat Analysis Enhanced by LLM: Integrating MITRE ATT&CK for Cyber-Physical System Security = AI-Augmented TAMELESS: Integrating MITRE ATT&CK and System Enhancements for Threat Analysis in Cyber-Physical Systems.

Rel. Fulvio Valenza. Politecnico di Torino, Corso di laurea magistrale in Ingegneria Informatica (Computer Engineering), 2025

Preview	PDF (Tesi_di_laurea) - Tesi Licenza: Creative Commons Attribution Non-commercial No Derivatives. Download (4MB) \| Preview
	Archive (ZIP) (Documenti_allegati) - Altro Licenza: Creative Commons Attribution Non-commercial No Derivatives. Download (186MB)

Abstract

In an era in which smart systems intrinsically integrate cyber, physical, and human components, threat analysis requires an approach that overcomes the limitations of traditional models, not by considering purely cyber threats but by focusing on the interaction between these domains. Based on the hybrid model described in “A Hybrid Threat Model for Smart Systems” and on the TAMELESS tool, an automatic tool that, through formal rules, derives the security state of complex systems, this thesis aims to enhance TAMELESS to make it more exhaustive, efficient, and accessible. Initially, the study focused on analyzing real cases involving interactions between cyber, physical, and human elements, verifying the applicability of TAMELESS rules to these scenarios.

Subsequently, an analysis was conducted on the nature of the properties and relationships, which highlighted the coherence of the relationships defined in the model