Threat Modeling: A Practical Guide for Development Teams (pdf)

Description

Contrary to popular belief, threat modeling doesn’t require advanced security knowledge to initiate or a Herculean effort to sustain. But it is critical for spotting and addressing potential concerns in a cost-effective way before the code’s written–and before it’s too late to find a solution. Authors Izar Tarandach and Matthew Coles walk you through various ways to approach and execute threat modeling in your organization.

• Explore fundamental properties and mechanisms for securing data and system functionality
• Understand the relationship between security, privacy, and safety
• Identify key characteristics for assessing system security
• Get an in-depth review of popular and specialized techniques for modeling and analyzing your systems
• View the future of threat modeling and Agile development methodologies, including DevOps automation
• Find answers to frequently asked questions, including how to avoid common threat modeling pitfalls