Threat modeling: Diving into the deep end

IEEE Software

Volumn 25, Issue 1, 2008, Pages 28-34

  Ingalsbe, Jeffrey A ^a   Kunimatsu, Louis ^a   Baeten, Tim ^a   Mead, Nancy R ^b,c  

^a FORD MOTOR COMPANY   (United States)

^b CARNEGIE MELLON UNIVERSITY   (United States)

^c Software Engineering Institute

Author keywords

DREAD; Risk assessment; Risk management; Threat analysis; Threat modeling

Indexed keywords

AUTOMOTIVE INDUSTRY; COMPUTER SIMULATION; CUSTOMER SATISFACTION; INFORMATION TECHNOLOGY; STRATEGIC PLANNING;

FORD MOTOR COMPANY (CO); THREAT ANALYSIS; THREAT MODELING;

RISK MANAGEMENT;

EID: 39449110065     PISSN: 07407459     EISSN: None     Source Type: Journal    
DOI: 10.1109/MS.2008.25     Document Type: Article

References (4)

1. F. Swiderski and W. Snyder, Threat Modeling, Microsoft Press, 2004.
2. P. Saitta, B. Larcom, and M. Eddington, "Trike v.1 Methodology Document [Draft]," 13 July 2005, www.octotrike.org/ Trike_v1_Methodology_Document-draft.pdf.
3. S. Myagmar, A. Lee, and W. Yurcik, "Threat Modeling as a Basis for Security Requirements," Proc. Symp. Requirements Engineering for Information Security (SREIS 05), 2005, www.sreis.org/SREIS_05_Program/short30_myagmar.pdf.
4. M. Howard and D. LeBlanc, Writing Secure Code, 2nd ed., Microsoft Press, 2002.