Moocable is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

Learning Threat Modeling for Security Professionals

Description

Threat modeling helps security professionals understand what can go wrong—and what to do about it. Learn to use the four-question and STRIDE frameworks for threat modeling.

Tags

Syllabus

Introduction
  • Develop secure products
  • Why would you threat model?
  • A simple approach to threat modeling
1. The Four Question Framework
  • What are we working on?
  • What can go wrong?
  • What are we going to do about it?
  • Did we do a good job?
2. STRIDE
  • Spoofing a specific server
  • Tampering with a file
  • Interlude: Scope and timing
  • Repudiating an order
  • Information disclosure
  • Denial of service
  • Elevation of privilege
Conclusion
  • Next steps

Online Course


Learning Threat Modeling for Security Professionals

Affiliate notice

Threat modeling helps security professionals understand what can go wrong—and what to do about it. Learn to use the four-question and STRIDE frameworks for threat modeling.

Introduction
  • Develop secure products
  • Why would you threat model?
  • A simple approach to threat modeling
1. The Four Question Framework
  • What are we working on?
  • What can go wrong?
  • What are we going to do about it?
  • Did we do a good job?
2. STRIDE
  • Spoofing a specific server
  • Tampering with a file
  • Interlude: Scope and timing
  • Repudiating an order
  • Information disclosure
  • Denial of service
  • Elevation of privilege
Conclusion
  • Next steps