Threat Modeling within DevSecOps
Learn how to incorporate threat modeling into your DevSecOps practices to enhance security and protect against potential cyber threats.
How Does Threat Modeling Fit Within NIST Cybersecurity Framework (CSF) and ISO27001?
Learn how threat modeling aligns with NIST CyberSecurity Framework and ISO27001. Discover key insights to enhance your cybersecurity strategy.
ReDoS: Regular Expression Denial of Service
Learn about the dangers of ReDoS attacks and how to protect your website from Regular Expression Denial of Service vulnerabilities.
Security by Design: Building Securely from the First Line of Code
Learn how to implement security by design principles in your projects to proactively address cybersecurity threats. Stay ahead of potential risks.
AI Risk Assessments in Cybersecurity
AI Risk Assessments in Cybersecurity: Why the Future of Protection Hinges on Algorithms That Think Ahead AI Risk Assessments in Cybersecurity have moved from being … Read More
How Threat Modeling can Help with Vulnerability Management
In this article, we’ll explore how threat modeling can help with vulnerability management. We’ll also add an example with a diagram. I also wrote an … Read More
Ultimate Threat Modeling Example using Multiple Methods
In this article, we’ll provide the ultimate threat modeling example using multiple methods, including Data Flow Diagrams, Attack Trees, and STRIDE. This approach allows us … Read More
Threat Modeling Framework
The Threat Modeling Framework describes activities & components needed to perform threat modeling in a structured and systematic manner, from external factors influencing a threat model to the core threats … Read More
Why Threat Modeling is Overly Complex and How We Can Simplify It
Threat modeling can often feel complex and confusing for security professionals who are new to it. Further, it can feel extra complex to developers, management, … Read More
LINDDUN Threat Modeling
What is LINDDUN Threat Modeling LINDDUN is a threat modeling method focused on privacy. It was developed by privacy experts at KU Leuven (a university … Read More