ThreatForest: Multi-Agent Attack Tree Generation with Pluggable TTP Framework Mapping

본문 미리보기

arXiv:2607.27528v1 Announce Type: new Abstract: Threat modeling is essential for secure software development, yet manual analysis of cloud-native architectures is slow and demands scarce security expertise. We present ThreatForest, a multi-agent system that generates structured attack trees from source code repositories, maps attack steps to adversary tactics, techniques, and procedures (TTPs) from a pluggable set of frameworks (MITRE ATT&CK, CAPEC, and cloud-specific threat matrices), and synt