This chapter explores the tenets of risk management, the different frameworks that exist, and how to perform threat modeling. It discusses the importance of first defining a cybersecurity framework before then deciding on a threat modeling framework to use. The chapter identifies the threats and helps to determine the threats relevant to the system. It also identifies the vulnerabilities, assigning them to specific vulnerability categories to find areas where mistakes are generally made in system development. The chapter reviews the differences between the STRIDE, PASTA,and TRIKE frameworks. No matter what model is chosen, the most important step in threat modeling, the similarity across all frameworks, is the pivotal role asset identification plays in the success of the threat modeling exercise.


    Access

    Check access

    Check availability in my library

    Order at Subito €


    Export, share and cite



    Title :

    Risk Management


    Contributors:

    Published in:

    Publication date :

    2020-03-10


    Size :

    24 pages




    Type of media :

    Article/Chapter (Book)


    Type of material :

    Electronic Resource


    Language :

    English




    Risk management device, risk management method, and risk management system

    LAGET ANTHONY / IKEDA TAKAHIRO | European Patent Office | 2023

    Free access

    RISK MANAGEMENT DEVICE, RISK MANAGEMENT METHOD, AND RISK MANAGEMENT SYSTEM

    RAJITH ANJALI / IKEDA TAKAHIRO | European Patent Office | 2022

    Free access

    RISK MANAGEMENT DEVICE, RISK MANAGEMENT METHOD AND RISK MANAGEMENT SYSTEM

    RAJITO ANJARI / IKEDA TAKAHIRO | European Patent Office | 2022

    Free access

    Risk Management

    Rickmann, A. / International Association of Ports and Harbors | British Library Conference Proceedings | 1997


    Risk management

    Wood, J. / Railway Industry Association | British Library Conference Proceedings | 1996