Threat Modeling: A Summary of Available Methods

reportActive / Technical Report | Accession Number: AD1084024 | Open PDF

Abstract:

The twelve threat modeling methods discussed in this paper come from a variety of sources and target different parts of the process. No one threat modeling method is recommended over another the decision of which methods to use should be based on the needs of the project and its specific concerns.

Author(s):
Shevchenko, Nataliya ; Chick, Timothy A ; O'riordan, Paige ; Scanlon, Thomas P ; Woody, Carol
Author Organization(s):
Carnegie Mellon University Software Engineering Institute Pittsburgh United States
Descriptive Note:
Technical Report,01 Jan 1999,31 Jan 2002
Pagination:
0026

Security Markings

DOCUMENT & CONTEXTUAL SUMMARY

Distribution:
Approved For Public Release
Distribution Statement:
Approved For Public Release;

RECORD

Collection: TR
Identifying Numbers
Report Number(s):
AFLCMC AZS
Contract/Grant Number(s):
FA8702-15-D-0002
 Subject Terms
Joint Capability Areas:
JCA_5_Command and Control; JCA_5.3_Planning; JCA_7_Protection; JCA_7.2.1_Mitigate Lethal Effects; JCA_7.2_Mitigate; JCA_8_Building Partnerships; JCA_6_Net Centric; JCA_8.2.4_Leverage Capacities and Capabilities of Security Establishments; JCA_8.2_Shape; JCA_2_Battlespace Awareness; JCA_4.6_Engineering; JCA_5.3.2_Apply Situational Understanding; JCA_6.4.1_Secure Information Exchange; JCA_1_Force Support; JCA_6.4_Information Assurance; JCA_7.1.2_Prevent Non-kinetic Attack; JCA_7.1_Prevent; JCA_1.2_Force Preparation; JCA_1.2.3_Educating; JCA_2.4.2_Evaluation; JCA_3.2_Engagement
Communities of Interest:
Cyber
Descriptor(s):
cyber physical systems, infrastructure, consumers, security, spectra
Field(s)/Group(s):
Cybernetics
Keyword(s):
cybersecurity, threat modeling, Cyber Physical Systems, Cybersecurity Engineering, Software Assurance, Science of Cybersecurity, OCTAVE, Risk Assessment, SQUARE, Threat
Report Date:
2018 Jul 01
Creation Date:
2019 Nov 14