This chapter deals with the process and different approaches to perform threat modeling. It discusses the numerous framework options, such as VAST, PASTA, and the Microsoft STRIDE model that can be used to perform threat modeling. Threat modeling consists of several steps: (1) understanding the security requirements by defining the boundaries of the security problem, external dependencies, and security controls in the system; (2) creating an asset inventory and identifying the roles of those assets and how they interact; (3) identifying the trust boundaries between those assets; (4) identifying the threats that are applicable to the assets; (5) identifying the attacks that can be used to realize each threat; and (6) planning and implementing the security controls to mitigate the threats. The overall goal is to understand the threats affecting the asset(s) to identify the mitigation strategies to lower the likelihood of their successful occurrence.
Threat Modeling
Hacking Connected Cars ; 61-85
10.03.2020
25 pages
Aufsatz/Kapitel (Buch)
Elektronische Ressource
Englisch
VAST , threat modeling , PASTA , STRIDE model
Modeling the Anti-Helicopter Mine Threat
AIAA | 2003
|Threat Modeling in the Railway Domain
British Library Conference Proceedings | 2019
|Modeling the Anti-Helicopter Mine Threat
British Library Conference Proceedings | 2003
|Aircraft threat modeling from performance data
AIAA | 1993
|