 |
There are simply five reasons why we have to conduct the threat modeling assessment.
First, Threat modeling is an important aspect in developing good functional/non- functional security requirements as well as designing good comprehensive mitigation strategies.
Second, Accurately determine the attack surface for the application from the point of view of the attacker.
Third, Assign risk to the various threats and come up with a strategic plan.
Fourth, Drive the vulnerability mitigation process which can include the mitigation, accept, transfer and avoid.
Fifth, Lead to security testing requirements that define the security testing scope of the system
|
IEEE/ICACT20220353 Slide.04
[Big Slide]
[YouTube]