Modelling threats

• Titel: Modelling threats
• Titelzusatz: strategies in threat modelling
• Mitwirkende: Fisher, Derek [MitwirkendeR]
• Institutionen: Packt Publishing, [Verlag]
• Ausgabe: [First edition].
• Verlagsort: [Place of publication not identified]
• Verlag: Packt Publishing
• E-Jahr: 2025
• Jahr: [2025]
• Umfang: 1 online resource (1 video file (3 hr., 6 min.))
• Illustrationen: sound, color
• Fussnoten: Online resource; title from title details screen (O’Reilly, viewed February 5, 2025)
• ISBN: 978-1-83702-521-3
• ISBN: 1-83702-521-5
• Datenträger: Online-Ressource
• Sprache: eng
• Sach-SW: Sécurité informatique
• Form-SW: Instructional films
• Form-SW: Nonfiction films
• Form-SW: Internet videos
• Form-SW: Films de formation
• Form-SW: Films autres que de fiction
• Form-SW: Vidéos sur Internet
• K10plus-PPN: 1919253874
• K10plus-PPN:
  Universitätsbibliothek
• Lokale URL UB: Zum Volltext
• Lokale URL UB: Bibliothek der Medizinischen Fakultät Mannheim der Universität Heidelberg
• Bibliothek/Idn: UW / m4683387794
• Lokale URL Inst.: Zum Volltext

Abstract

This course guides you through the essentials of threat modeling, starting with fundamental concepts like assets, threats, vulnerabilities, and risks. You'll learn the purpose and mindset required for effective threat modeling, setting the stage for deeper exploration. Early modules cover foundational methods and key steps, ensuring a solid grasp of the basics before advancing further. As the course progresses, you'll explore methodologies such as STRIDE, DREAD, and MITRE ATT&CK, learning how to evaluate and mitigate risks effectively. Hands-on modules introduce tools like attack trees, Deciduous, Threagile, and OWASP Threat Dragon, bridging theory and practical application. You'll also master integrating threat modeling into the software development lifecycle (SDLC), embedding security considerations throughout the process. The course concludes with real-world exercises where you'll model risks for financial and cloud environments and explore tools like Microsoft Threat Model and OWASP Risk Rating. These practical activities help solidify your skills, empowering you to identify, prioritize, and mitigate risks confidently. By the end, you'll be equipped to secure systems from design to deployment using advanced threat modeling techniques.