This chapter explores the tenets of risk management, the different frameworks that exist, and how to perform threat modeling. It discusses the importance of first defining a cybersecurity framework before then deciding on a threat modeling framework to use. The chapter identifies the threats and helps to determine the threats relevant to the system. It also identifies the vulnerabilities, assigning them to specific vulnerability categories to find areas where mistakes are generally made in system development. The chapter reviews the differences between the STRIDE, PASTA,and TRIKE frameworks. No matter what model is chosen, the most important step in threat modeling, the similarity across all frameworks, is the pivotal role asset identification plays in the success of the threat modeling exercise.
Risk Management
Hacking Connected Cars ; 153-177
2020-03-10
24 pages
Aufsatz/Kapitel (Buch)
Elektronische Ressource
Englisch
Risk management device, risk management method, and risk management system
Europäisches Patentamt | 2023
|RISK MANAGEMENT DEVICE, RISK MANAGEMENT METHOD, AND RISK MANAGEMENT SYSTEM
Europäisches Patentamt | 2022
|RISK MANAGEMENT DEVICE, RISK MANAGEMENT METHOD AND RISK MANAGEMENT SYSTEM
Europäisches Patentamt | 2022
|British Library Conference Proceedings | 1997
|British Library Conference Proceedings | 1996
|