Threat Modeling

Table of Contents

1. Cover
2. Table of Contents
3. Title Page
4. Copyright Page
5. Dedication Page
6. Credits
7. About the Author
8. About the Technical Editor
9. Acknowledgments
10. Introduction
    1. What Is Threat Modeling?
    2. Reasons to Threat Model
    3. Who Should Read This book?
    4. What You Will Gain from This Book
    5. How To Use This Book
    6. New Lessons on Threat Modeling
11. Part I: Getting Started
    1. CHAPTER 1: Dive In and Threat Model!
       1. Learning to Threat Model
       2. Threat Modeling on Your Own
       3. Checklists for Diving In and Threat Modeling
       4. Summary
    2. CHAPTER 2: Strategies for Threat Modeling
       1. “What's Your Threat Model?”
       2. Brainstorming Your Threats
       3. Structured Approaches to Threat Modeling
       4. Models of Software
       5. Summary
12. Part II: Finding Threats
    1. CHAPTER 3: STRIDE
       1. Understanding STRIDE and Why It's Useful
       2. Spoofing Threats
       3. Tampering Threats
       4. Repudiation Threats
       5. Information Disclosure Threats
       6. Denial-of-Service Threats
       7. Elevation of Privilege Threats
       8. Extended Example: STRIDE Threats against Acme-DB
       9. STRIDE Variants
       10. Exit Criteria
       11. Summary
    2. CHAPTER 4: Attack Trees
       1. Working with Attack Trees
       2. Representing a Tree
       3. Example Attack Tree
       4. Real Attack Trees
       5. Perspective on Attack Trees
       6. Summary
    3. CHAPTER 5: Attack Libraries
       1. Properties of Attack Libraries
       2. CAPEC
       3. OWASP Top Ten
       4. Summary
    4. CHAPTER 6: Privacy Tools
       1. Solove's Taxonomy of Privacy
       2. Privacy Considerations for Internet Protocols
       3. Privacy Impact Assessments (PIA)
       4. The Nymity Slider and the Privacy Ratchet
       5. Contextual Integrity
       6. LINDDUN
       7. Summary
13. Part III: Managing and Addressing Threats
    1. CHAPTER 7: Processing and Managing ...