This chapter deals with the process and different approaches to perform threat modeling. It discusses the numerous framework options, such as VAST, PASTA, and the Microsoft STRIDE model that can be used to perform threat modeling. Threat modeling consists of several steps: (1) understanding the security requirements by defining the boundaries of the security problem, external dependencies, and security controls in the system; (2) creating an asset inventory and identifying the roles of those assets and how they interact; (3) identifying the trust boundaries between those assets; (4) identifying the threats that are applicable to the assets; (5) identifying the attacks that can be used to realize each threat; and (6) planning and implementing the security controls to mitigate the threats. The overall goal is to understand the threats affecting the asset(s) to identify the mitigation strategies to lower the likelihood of their successful occurrence.


    Zugriff

    Zugriff prüfen

    Verfügbarkeit in meiner Bibliothek prüfen

    Bestellung bei Subito €


    Exportieren, teilen und zitieren



    Titel :

    Threat Modeling


    Beteiligte:
    Knight, Alissa (Autor:in)

    Erschienen in:

    Erscheinungsdatum :

    10.03.2020


    Format / Umfang :

    25 pages




    Medientyp :

    Aufsatz/Kapitel (Buch)


    Format :

    Elektronische Ressource


    Sprache :

    Englisch




    Modeling the Anti-Helicopter Mine Threat

    Townsend, Sean / Olree, Keith / Hayes, Frank et al. | AIAA | 2003


    Threat Modeling in the Railway Domain

    Schmittner, Christoph / Tummeltshammer, Peter / Hofbauer, David et al. | British Library Conference Proceedings | 2019


    Modeling the Anti-Helicopter Mine Threat

    Townsend, S. / Olree, K. / Hayes, F. et al. | British Library Conference Proceedings | 2003


    Aircraft threat modeling from performance data

    ANDERSON, MARK / SCHAB, DANIEL | AIAA | 1993


    Data-Centric Threat Modeling Delivers Validated Cybersecurity

    Abraham, Hila / Pazandak, Paul / Odermatt, Andre | IEEE | 2024