The Enchiridion of Impetus Exemplar

• Intro to Threat Modeling


• Methodologies
  
  
  
  • Microsoft Threat Modeling
  
  
  • PASTA
  
  
  • OCTAVE
  
  
  • Trike
  
  
  • LINDDUN
  
  
  • VAST
  
  
  • ID3
  
  
  
  


• Auxiliary
  
  
  
  • Control Frameworks
  
  
  • Attack Libraries
  
  
  • Attack Trees
  
  
  • Vulnerability Catalogs
  
  
  • Risk Assessment Models
  
  
  • STRIDE
  
  
  • DREAD
  
  
  • Cyber Threat Intelligence (CTI)
  
  
  
  


• Future Methodologies coming soon!
  
  
  
  • NIST SP 800-154
  
  
  • OWASP Threat Modeling Process
  
  
  • TARA (MITRE)
  
  
  • IDDIL/ATC
  
  
  • hTMM
  
  
  • QTMM
  
  
  • Security Cards
  
  
  
  


• Modeling Exercise(s) coming soon!


• Conclusion


• Appendices
  
  
  
  • Data Flow Diagram
  
  
  • Tooling
  
  
  • Terminology
  
  
  
  


• References

Threat Modeling is the process of building and analyzing representations of …

infosec technical threatmodeling