Threat Modeling

by Frank Swiderski, Window Snyder

In this straightforward and practical guide, Microsoft® application security specialists Frank Swiderski and Window Snyder describe the concepts and goals for threat modeling—a structured approach for identifying, evaluating, and mitigating risks to system security. Discover how to use the threat modeling methodology to analyze your system from the adversary’s point of view—creating a set of data points that help drive security specifications and testing. You’ll review application scenarios that illustrate threat modeling concepts in action, understanding how to use threat modeling to help improve the built-in security of a system—as well as your customer's confidence in the security of that system—regardless of development environment.

Gain an in-depth, conceptual understanding—along with practical ways to integrate threat modeling into your development efforts:

Genres: Technology, Nonfiction, Computers

288 pages, Paperback

First published June 22, 2004

Reviews

[Lam]

All thing about it