Frameworks of Defense: A Quick Look at Key Threat Modeling Frameworks
What are threat modeling frameworks? They are structured methodologies we can use to help us identify, categorize, and mitigate security risks in: · Systems · Applications · Data flows From these frameworks we can build test plans to think like an attacker so that we can build defenses against them. Key Frameworks There are quite a few frameworks, but here are some key ones: DFD = Data Flow Diagram Framework Type / Focus Key Idea How It Works (Simplified) Best Use Case STRIDE Threat identification model Categorizes threats using a mnemonic Six threat categories: Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege Analyzing specifi...