book

Threat Modeling Best Practices

Name: Threat Modeling Best Practices
Author: Derek Fisher
ISBN: 9781805128250

by Derek Fisher

October 2025

Intermediate to advanced

322 pages

8h 45m

English

Packt Publishing

Read now

Unlock full access

Preface
Who this book is forWhat this book coversTo get the most out of this bookGet in touchShare your thoughtsHow to Unlock
Threat Modeling Today’s Systems
Threat Modeling Methodologies
Free Benefits with Your BookUnderstanding threat modelingWhat is threat modeling?Why do we threat model?Why doesn’t everyone threat model?Essential elements of threat modelingAssetsThreatsRisksVulnerabilitiesHow do vulnerabilities relate to threat modeling?Scope and assumptions of threat modelingDefining the scopeAddressing assumptionsBest practices in performing threat modelingThreat modeling mindsetInvolving the right stakeholdersIntegrate, iterate, and reassessAvoiding mistakes while threat modelingStarting too lateLack of expertiseOverlooking threatsInadequate documentationIgnoring feedbackInconsistent updatesResource constraintsExample: Threat modeling financial system workflowBackgroundObjectiveIdentifying assetsMapping data flowsDefining threat agentsIdentifying threat scenariosAssessing vulnerabilitiesDetermining impactDeveloping mitigation strategiesImplementing controlsMonitoring and reviewingResultsSummaryGet This Book’s PDF Version and Exclusive Extras
Understanding and Evaluating Threats during Threat Modeling
Identifying assets for threat modelingTypes of common assetsHardware assetsSoftware assetsDigital assetsCloud assetsNetwork assetsHuman assetsUnderstanding asset value and criticalityBest practice for evaluating assetsAssigning value to assetsMaintaining a comprehensive asset inventoryIntegrating threats with vulnerabilitiesVulnerabilitiesBest practices with vulnerabilities and threat modelingTypes of threat categoriesEvaluating threatsCreating a security architecture diagramTrust zones/boundariesBuilding in data flowActorsThreat actorsScript kiddiesHacktivistsInsidersHackersCybercriminalsAdvanced persistent threats (APTs)Describing attack scenariosFinalizing the security architecture diagramSummaryGet This Book’s PDF Version and Exclusive Extras
Prioritizing Risks Found in Threat Modeling
Connecting threats and risksEvaluating risksQualitative risk assessmentQuantitative risk assessment (monetary impact)ISO/IEC 27005 risk assessmentNIST SP 800-30 risk assessment methodologyDREADRisk appetiteRisk appetite statementCategorizing and classifying risksRisk assessment and managementRisk management frameworkNIST Risk Management Framework (RMF)Factor Analysis of Information Risk (FAIR)Operationally Critical Threat, Asset, and Vulnerability Evaluation (OCTAVE)ISO/IEC 27001Which framework is best?Mitigating threats and risksRisk heat mapRisk-based prioritization and mitigationRisk response strategiesUsing threat modeling in risk managementCase study: Supply chain risk in healthcare – Mayo ClinicKey components and strategiesSupplier categorizationCollaborationKey takeaways and lessons learnedSummaryGet This Book’s PDF Version and Exclusive Extras
Applying Threat Modeling
Threat Modeling of Software
Threat modeling in the SDLCThe role of threat modeling in software securityBenefits of early threat modelingThreat modeling of software in a perfect worldThe reality of threat modeling of softwareUsage of threat modeling in different SDLC stagesThreat modeling during development and testingThreat modeling during the deployment and maintenance phaseEvolving threat modelsManaging threats throughout the SDLCImportance of a systematic approachExample threat model with PicShareCase studySummaryGet This Book’s PDF Version and Exclusive Extras
Threat Modeling Cloud and Infrastructure
What infrastructure means todayThe omni-deployment modelRisks and limitations of on-prem solutionsCloud security challenges and architectural resilienceThe hybrid attack surfaceExample: hybrid infrastructure in a financial institutionCloud and infrastructure threat modelingTools for attack path analysisHands-on activity with Attack Flow BuilderSetup and initial configurationCreating the initial access actionCreating the foothold establishment actionConnecting initial access to the footholdCreating the malware objectCreating the credential harvesting actionCreating the credential assetCreating a lateral movement actionValidating your flowSaving your workImportant notesAssessing system preparednessExample: preparedness assessmentsDesigning secure infrastructureSecure design in the cloudSecure design on-premisesSummaryGet This Book’s PDF Version and Exclusive Extras
Threat Modeling the Supply Chain
The complexity of the supply chainLogistics of delivery and supply versus demandSupply chain threat vectorsInternal management of threats to the supply chainInformation management risksBuilding a supply chain threat modelAssessing the supply chainMediTech Innovations scenarioSupply chain mappingAsset categorization and prioritizationThreat scenario developmentDriving Change Through Threat ModelingDesigning a secure supply chainSecurity foundationsArchitect for resilienceMeasure and improveSummaryGet This Book’s PDF Version and Exclusive Extras
Mobile and IoT Threat Modeling
Understanding IoT and mobile threatsConvergence of IoT and mobile in IT/OT environmentsExplosion of IoT botnetsAdversary modelTypes of adversary modelsDolev-YaoCanetti-KrawczykByzantine adversaryThe honest-but-curious adversaryThreat modeling of IoT devicesEcosystem analysisDistinct IoT considerationsUsing threat libraries for IoTThreat modeling a smart factoryThreat modeling of mobile devicesDistinct mobile considerationsThreat modeling a mobile bank applicationBest practiceDesigning secure mobile and IoT systemsMobile and IoT device-level controlsNetwork-level controlsOperational controlsCase study: Virgin Atlantic’s IoT-enabled aircraftSummaryGet This Book’s PDF Version and Exclusive Extras

Advanced Topics and Industry Practices
AI and Threat Modeling of LLMs
AI’s impact on technologyTypes of language modelsStatistical language modelsNeural language modelsTransformer-based language modelsMultimodal language modelsSpecialized and domain-specific modelsAgentic AI language modelsHow language models operateLanguage model promptsSystem promptsUser promptsSecurity paradigm of language modelsSemantic versus syntactic inputInjection and jailbreakingContext window exploitationMalicious output from language modelsData poisoning vectorsStrategic targeting of domain-specific knowledgeGeneral defenses for language modelsModel protectionCISA’s adversarial trainingInput validation and sanitization strategiesOutput filtering and classificationRuntime monitoring of LLM behaviorLanguage model pipeline securityStep 1: Data collection and preparationStep 2: Pretraining and selecting a modelStep 3: Alignment phaseStep 4: Verifying the security postureStep 5: Deployment and continuous improvementExample: Threat modeling a financial chatbotExamples of threats and remediations in a language modelSummaryGet This Book’s PDF Version and Exclusive Extras
Building a Threat Modeling Practice
Is your organization ready?Setting objectives for a threat modeling practiceEstablishing SMART objectivesMetrics to targetMaturity models and threat modelingAligning with business prioritiesBuilding a threat modeling practice and teamAd hocThreat modeling programCoE versus CoPAssembling the core teamIncorporating threat intelligenceIntelligence briefingsAutomated analysis integrationManaging threat modeling artifactsBest practiceDocument management workflowModel creationReview and validationApproval and baselineMaintenanceArchivalDeveloping reference architectureHandling the findings from the threat modelRemediation planning and monitoringIntegration with vulnerability managementExample: creating a practice in a large organizationSummaryGet This Book’s PDF Version and Exclusive Extras
Future Directions in Threat Modeling
Future direction in threat modelingWhere are we today?Where is threat modeling heading?Threat modeling an individual user story or feature requestIntegration with current processesIntegration with the security fabricAuto-generation of modelsUsing AI to speed up the processSupporting Secure by DesignEnhancing collaboration in threat modelingBreaking the security specialist bottleneckCross-functional integrationDemocratization through toolsBuilding a security cultureExercise: Threat model workshop – security questImproving ease of useUser experience evolutionCode approachesExerciseNo-code/low-code approachesIntegrating AICurrent AI applicationsMachine learning for pattern recognitionPredictive threat intelligence integrationAdapting to new IT innovations and security vulnerabilitiesCloud-native security modelingEmerging threat landscapesRegulatory and compliance evolutionEmbracing continuous improvement and preparing for the futurePolicy-as-code implementationContinuous integration strategiesFuture readiness frameworkSummaryGet This Book’s PDF Version and Exclusive Extras
Unlock Your Exclusive Benefits
Unlock this Book’s Free Benefits in 3 Easy StepsStep 1Step 2Step 3Need help?
Other Books You May Enjoy
Index

Overview

Build threat modeling skills with practical advanced techniques to enhance risk analysis, optimize security measures, and stay ahead of emerging threats in the complex cybersecurity landscape Free with your book: DRM-free PDF version + access to Packt's next-gen Reader*

Key Features

Identify and mitigate security threats across software, cloud, mobile, IoT, and supply chains using STRIDE, PASTA, and MITRE ATT&CK
Learn from real-world case studies showing practical threat modeling applications across industries
Build threat modeling programs with the right team, tools, SDLC integration, and continuous improvement

Book Description

Threat modeling has become a cornerstone of modern cybersecurity, yet it is often overlooked, leaving security gaps that attackers can exploit. With the rise in system complexity, cloud adoption, AI-driven threats, and stricter compliance requirements, security teams need a structured approach to proactively spot and stop risks before attackers do. This book delivers exactly that, offering actionable insights for applying industry best practices and emerging technologies to secure systems. It breaks down the fundamentals of threat modeling and walks you through key frameworks and tools such as STRIDE, MITRE ATT&CK, PyTM, and Attack Paths, helping you choose the right model and create a roadmap tailored to your business. You'll learn how to use leading threat modeling tools, identify and prioritize potential threats, and integrate these practices into the software development life cycle to detect risks early. The book also examines how AI can enhance analysis and streamline security decision-making for faster, stronger defenses.

By the end, you'll have everything you need to build systems that anticipate and withstand evolving threats, keeping your organization secure in an ever-changing digital landscape.

*Email sign-up and proof of purchase required

What you will learn

Create foundational threat modeling artifacts like Data Flow Diagrams and security architecture diagrams to visualize system threats
Understand the relationship between vulnerabilities (exploitable weaknesses) and threats (sources of harm)
Analyze real-world case studies to see how threat modeling is applied in industry incidents
Evaluate and compare popular threat modeling tools, both open source and commercial
Explore advanced topics, including threat modeling for cloud environments and integrating with DevSecOps

Who this book is for

This book is for cybersecurity professionals, security consultants, penetration testers, and compliance managers seeking to integrate threat modeling into their assessment methodologies and client engagements. It’s also ideal for software architects, DevOps engineers, risk managers, and organizational leaders responsible for identifying, assessing, and mitigating security risks in their technological environments. Whether you’re new to threat modeling or looking to enhance your existing expertise, this book helps you with foundational knowledge as well as advanced techniques.

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Publisher Resources

ISBN: 9781805128250

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills