Threat Modeling: Diving into the Deep End

IEEE paper on the TAM tool. 

"Ford Motor Company is currently introducing threat modeling on strategically important IT applications and business processes. The objective is to support close collaboration between IT Security & Controls (the ITS group at Ford) and its business customers in analyzing threats and better understanding risk. To accomplish this, a core group of security personnel have piloted Microsoft’s Threat Analysis and Modeling process and tool on a dozen projects. Here, we discuss this TAM process, its benefits and challenges, and some deployment solutions."

https://buildsecurityin.uscert.gov/daisy/bsi/resources/published/articles/932.html

-Talhah

Comments

• Anonymous
  January 08, 2008
  PingBack from http://msdnrss.thecoderblogs.com/2008/01/09/threat-modeling-diving-into-the-deep-end/