Industrial Cybersecurity

Threat modeling

With all the vulnerabilities discovered for the identified assets of the SUC, the next activity is to create risk scenarios using threat modeling techniques. In a way, creating risk scenarios is about trying to predict where a threat is most likely going to target and succeed. At this point, it is important to know the system or process being evaluated very well. Creating risk scenarios starts with combining information such as threat sources and threat vectors to create possible threat events for the vulnerabilities found. For a threat event to be feasible, these elements must be present: a threat source to carry out the event, a threat vector to exploit the vulnerability, and a target with a vulnerability. The following ...