Threat Modeling Concepts and Methodologies
In this section, you will gain an understanding of the concepts and methodologies involved in threat modeling. The first logical step is to understand what threat modeling is. As plainly as it can be expressed, threat modeling is a process for refining application, system, or business logic security by first identifying goals and weaknesses and then identifying countermeasures to mitigate the risks to the subject of the modeling exercise. First, some questions about the modeling subject, be that an application, a system, or a business process flow need to be considered.
One of the first considerations is the goal or objective of the subject of the modeling exercise. After all, the purpose of threat modeling is to ensure that the subject of the modeling exercise achieves its intended objective. You not only need to understand what the goal is but also how the objective is achieved. One of the more popular ways to achieve that understanding...
