Industrial Cybersecurity

Step 2 - Vulnerability identification and threat modeling

The next step in the risk assessment process is aimed at finding all relevant vulnerabilities and associated threats for the list of IP addresses that were created in the previous step. This step uses threat modeling to accomplish this. Threat modeling is the process of turning threat information into actionable threat intelligence by means of threat events and risk scenarios. It is the process of collecting threat information about threat sources along with its motivations, capabilities, and activities. Threat information is general details on threats taken from online sources such as US-CERT, CVE, and NIST feeds.

Threat intelligence is general threat information, correlated and processed ...