This chapter explores the tenets of risk management, the different frameworks that exist, and how to perform threat modeling. It discusses the importance of first defining a cybersecurity framework before then deciding on a threat modeling framework to use. The chapter identifies the threats and helps to determine the threats relevant to the system. It also identifies the vulnerabilities, assigning them to specific vulnerability categories to find areas where mistakes are generally made in system development. The chapter reviews the differences between the STRIDE, PASTA,and TRIKE frameworks. No matter what model is chosen, the most important step in threat modeling, the similarity across all frameworks, is the pivotal role asset identification plays in the success of the threat modeling exercise.


    Zugriff

    Zugriff prüfen

    Verfügbarkeit in meiner Bibliothek prüfen

    Bestellung bei Subito €


    Exportieren, teilen und zitieren



    Titel :

    Risk Management


    Beteiligte:
    Knight, Alissa (Autor:in)

    Erschienen in:

    Erscheinungsdatum :

    2020-03-10


    Format / Umfang :

    24 pages




    Medientyp :

    Aufsatz/Kapitel (Buch)


    Format :

    Elektronische Ressource


    Sprache :

    Englisch




    Risk management device, risk management method, and risk management system

    LAGET ANTHONY / IKEDA TAKAHIRO | Europäisches Patentamt | 2023

    Freier Zugriff

    RISK MANAGEMENT DEVICE, RISK MANAGEMENT METHOD, AND RISK MANAGEMENT SYSTEM

    RAJITH ANJALI / IKEDA TAKAHIRO | Europäisches Patentamt | 2022

    Freier Zugriff

    RISK MANAGEMENT DEVICE, RISK MANAGEMENT METHOD AND RISK MANAGEMENT SYSTEM

    RAJITO ANJARI / IKEDA TAKAHIRO | Europäisches Patentamt | 2022

    Freier Zugriff

    Risk Management

    Rickmann, A. / International Association of Ports and Harbors | British Library Conference Proceedings | 1997


    Risk management

    Wood, J. / Railway Industry Association | British Library Conference Proceedings | 1996