High-Level Threat Modelling Process

High Level Network Threat Modeling

Peter Torr - MSFT — Fri, 02 Sep 2005 00:05:04 GMT

Dana Epp has a great article at http://silverstr.ufies.org/blog/archives/000851.html

What is Microsoft doing for security?

Office Development, Security, Randomness... — Wed, 17 Aug 2005 05:32:47 GMT

A recent comment on the IE Blog made it pretty apparent that not everybody is aware...

Guerrilla Threat Modelling (or 'Threat Modeling' if you're American)

Office Development, Security, Randomness... — Sun, 27 Feb 2005 09:49:00 GMT

A crash-course in developing Data Flow Diagrams in support of software threat models

re: High-Level Threat Modelling Process

Peter Torr — Wed, 23 Feb 2005 01:54:00 GMT

More info on building DFDs is now available at:

http://weblogs.asp.net/ptorr/archive/2005/02/22/378510.aspx

re: High-Level Threat Modelling Process

Stefan Keller — Wed, 09 Feb 2005 09:20:00 GMT

Not bad, but you end early.
- I always thought that other key benefits to do threat modelling are, that you could
a) show the morons that want to introduce insecurity later on in the project, what that will do to them easily and illustratively
b) have a readily available, nice residual risk piece for final sign-off

Regards

Stefan

re: High-Level Threat Modelling Process

Peter Torr — Wed, 09 Feb 2005 01:57:00 GMT

Some of us don't have certificates, you insensitive clod!

re: High-Level Threat Modelling Process

Insensitive Clod — Tue, 08 Feb 2005 22:42:00 GMT

But was your threat model DIGITALLY SIGNED?

High level Threat Modelling

Dana Epp's ramblings at the Sanctuary — Tue, 08 Feb 2005 19:45:00 GMT

Peter Torr has an interesting article/a> about high level threat modeling. The gist of his article is that the process consists of six (possibly repeated) steps, outlined below in more detail: Preparation Brainstorming Drafting Review Verification Closure I highly recommend you go read his article to dig into the depth of each step. Good job Peter....

Threat Modeling book review

Sergey Simakov blog — Tue, 08 Feb 2005 13:14:00 GMT