Difference between revisions of "OWASP/Training/Threat Risk Modeling"

Revision as of 17:47, 12 November 2010

MODULE
Threat Risk Modeling
Overview & Goal
When you start a web application design, it is essential to apply threat risk modeling; otherwise you will squander resources, time, and money on useless controls that fail to focus on the real risks. The method used to assess risk is not nearly as important as actually performing a structured threat risk modeling. Microsoft notes that the single most important factor in their security improvement program was the corporate adoption of threat risk modeling.
Contents	Materials
Performing threat risk modeling using the Microsoft Threat Modeling Process Identify Security Objectives Application Overview Decompose Application Identify Threats STRIDE DREAD Alternative Threat Modeling Systems	OWASP Application Security Verification Standard Project OWASP Testing Guide V 3.0 - PDF

@@ Line 1: / Line 1: @@
 {{Template:<includeonly>{{{1}}}</includeonly><noinclude>OWASP Training Modules</noinclude>
-| Module_designation = [[:Threat Risk Modeling|Threat Risk Modelling]]
+| Module_designation = [[:Threat Risk Modeling|Threat Risk Modeling]]
 | Module_Overview_Goal = When you start a web application design, it is essential to apply threat risk modeling; otherwise you will squander resources, time, and money on useless controls that fail to focus on the real risks.