Bite-Sized Chunks

Course contentsShow

37What is Threat Modeling?
38Why Threat Modeling Matters
39The Four Key Questions
40Threat Modeling in the SDLC
41Assets, Entry Points, and Trust Boundaries
42Creating a Data Flow Diagram (DFD)
43DFD Levels and Decomposition
44Identifying Threats from Diagrams
45Threat Prioritization Basics
46Documenting Threat Models
47Understanding Adversary Types and Skill Levels
48Motivations: Financial Gain and Cybercrime
49Motivations: Espionage and Intelligence Gathering
50Motivations: Hacktivism and Ideological Attacks
51Motivations: Disruption and Destructive Attacks
52Insider Threats and Privileged Access Abuse
53Opportunistic vs Targeted Attackers
54Creating Attacker Personas for Threat Models
55Introduction to STRIDE
56Spoofing Identity Threats
57Tampering with Data Threats
58Repudiation Threats
59Information Disclosure Threats
60Denial of Service Threats
61Elevation of Privilege Threats
62STRIDE per Element Analysis
63STRIDE per Interaction Analysis
64Creating STRIDE Threat Tables
65Prioritizing STRIDE Threats
66STRIDE Mitigations and Controls
67Attack Trees and Attack Graphs
68Data Flow Diagrams for Threat Modeling
69PASTA (Process for Attack Simulation and Threat Analysis)
70LINDDUN for Privacy Threat Modeling
71Misuse and Abuse Cases
72DREAD Risk Rating Model
73Attack Surface Analysis
74Kill Chain Threat Modeling
75Comparing Threat Modeling Methodologies
76Collaborative Threat Modeling Workshops
77Threat Modeling in Requirements Phase
78Architecture Review and Threat Identification
79Threat Modeling During Development
80Security Testing Informed by Threat Models
81Threat Model Documentation and Artifacts
82Threat Model Reviews and Updates
83Developer Training on Threat Modeling
84Measuring Threat Modeling Effectiveness

37What is Threat Modeling?
38Why Threat Modeling Matters
39The Four Key Questions
40Threat Modeling in the SDLC
41Assets, Entry Points, and Trust Boundaries
42Creating a Data Flow Diagram (DFD)
43DFD Levels and Decomposition
44Identifying Threats from Diagrams
45Threat Prioritization Basics
46Documenting Threat Models
47Understanding Adversary Types and Skill Levels
48Motivations: Financial Gain and Cybercrime
49Motivations: Espionage and Intelligence Gathering
50Motivations: Hacktivism and Ideological Attacks
51Motivations: Disruption and Destructive Attacks
52Insider Threats and Privileged Access Abuse
53Opportunistic vs Targeted Attackers
54Creating Attacker Personas for Threat Models
55Introduction to STRIDE
56Spoofing Identity Threats
57Tampering with Data Threats
58Repudiation Threats
59Information Disclosure Threats
60Denial of Service Threats
61Elevation of Privilege Threats
62STRIDE per Element Analysis
63STRIDE per Interaction Analysis
64Creating STRIDE Threat Tables
65Prioritizing STRIDE Threats
66STRIDE Mitigations and Controls
67Attack Trees and Attack Graphs
68Data Flow Diagrams for Threat Modeling
69PASTA (Process for Attack Simulation and Threat Analysis)
70LINDDUN for Privacy Threat Modeling
71Misuse and Abuse Cases
72DREAD Risk Rating Model
73Attack Surface Analysis
74Kill Chain Threat Modeling
75Comparing Threat Modeling Methodologies
76Collaborative Threat Modeling Workshops
77Threat Modeling in Requirements Phase
78Architecture Review and Threat Identification
79Threat Modeling During Development
80Security Testing Informed by Threat Models
81Threat Model Documentation and Artifacts
82Threat Model Reviews and Updates
83Developer Training on Threat Modeling
84Measuring Threat Modeling Effectiveness

Lesson 39 of 3,052·2. Threat Modeling FundamentalsPro lesson

The Four Key Questions

Learn the foundational questions: What are we building? What can go wrong? What should we do about it? Did we do a good job?

This lesson is for subscribers

You've completed the free preview. Subscribe to unlock every lesson in every course.

See pricing Back to course