Threat Modeling

5 items tagged with "threat-modeling"

Filter by type:

Best Practices1

STRIDE Threat Modeling

A structured method for finding security threats by category, spoofing, tampering, repudiation, information disclosure, denial of service, and elevation of privilege.

Anti-Patterns1

Anti-Pattern

Security Through Obscurity

Relying on secrecy of design or implementation as the primary defense, rather than on sound, reviewable security controls.

FAQs1

FAQ

What is threat modeling?

Threat modeling is a structured exercise to identify potential threats, attack vectors, and weaknesses in a system before they are exploited, ideally ...

Glossaries2

Glossary

Defense in Depth

Defense in depth is a security strategy that layers multiple, independent controls so that if one defense fails, others continue to protect the system.

Glossary

Threat Modeling

Threat modeling is a structured process for identifying, analyzing, and prioritizing potential security threats to a system early in design, so defenses can be planned against them.