Threat Modeling: From Novice To Expert
- Description
- Curriculum
- FAQ
- Reviews
Take a deep dive into Threat Modeling and build your expertise from the ground up. This comprehensive course covers everything from foundational concepts to advanced hands-on exercises, equipping you with the skills needed to identify, analyze, and mitigate security threats effectively.
Through structured lessons and practical exercises, you’ll learn:
-
Introduction to Threat Modeling: Grasp the fundamentals, key terminologies, and essential concepts.
-
What / Why / When / Who: Understand the benefits, timing, and key stakeholders involved in Threat Modeling.
-
How to Threat Model: Follow a step-by-step guide with hands-on exercises to analyze an application’s security risks.
-
Threat Modeling Approaches: Explore the three primary approaches and learn when to apply each.
-
Threat Modeling Methodologies: Delve into STRIDE, DREAD, and PASTA to see how methodologies align with modeling approaches.
-
Hands-On Practice: Gain practical experience by threat modeling a web application, creating Data Flow Diagrams (DFD), and working with Assets, Data Flows, Trust Boundaries, and Trust Zones. Learn to identify, prioritize, and respond to threats effectively.
Designed for beginners and experienced professionals alike, this course is ideal for security analysts, software developers, system architects, and IT managers looking to strengthen their security expertise and implement Threat Modeling in real-world scenarios. No prior experience is required—just a keen interest in cybersecurity and secure development practices.
-
5
Introduction - What, Why, When, Who? -
6
Threat Modeling Everyday
-
7
Basic Terminologies
-
8
Definition of Threat Modeling
-
9
Basic Terminologies and Definition -
10
Risk - Definition
-
11
Risk Level
-
12
Risk Analysis
-
13
Risk Treatment
-
14
Risk
-
15
Why should we do Threat Modeling?
-
16
When should we do Threat Modeling?
-
17
Who should be involved during Threat Modeling?
-
18
Why? When? Who?
-
19
Conclusion
-
20
Introduction - How to Threat Model
-
21
Define Objectives - What should be achieved?
-
22
Assess - What are we working on?
-
23
Analyze Risks - What can go wrong?
-
24
Mitigate - What can we do about it?
-
25
Validate - Did we do a good job?
-
26
Define Objectives / Assess / Analyze Risks / Mitigate / Validate
-
27
Conclusion
-
42
Introduction - Threat Modeling - Hands-on
-
43
Threat Modeling a Web Application - Part 1
-
44
Data Flow Diagram (DFD)
-
45
Threat Modeling a Web Application - Part 2
-
46
Exercise 1: Assets
-
47
Exercise 2: Data Flows
-
48
Exercise 3: Trust Boundaries and Trust Zones
-
49
Exercise 4: Identify Threats
-
50
Exercise 5: Respond to Threats / Threat Report
-
51
Conclusion
