Threat Modeling

Index

A

• A-CTM (see Autodesk Continuous Threat Modeling)
• access control
  • access-control schemes, Authorization
  • authentication, Authorization
  • separation of privilege, Separation of privilege
• ACME language specification, How It Works, How It Works
• actors
  • attacker identification resources, Rinse and repeat, Threat Intelligence Gathering
  • attacker threats identified, Identifying Threats
    • determining exploitability, Determining Exploitability
  • attacker-centric approach to threat modeling, Looking Through Filters, Angles, and Prisms
  • definition, Basic Concepts and Terminology, Identification
  • identification for security, Identification
    • authentication, Authentication
    • authorization, Authorization
  • nonrepudiation in logging, Effective logging
  • security basic concepts, Basic Concepts and Terminology
  • system modeling
    • data flow diagrams, Data Flow Diagrams, Data Flow Diagrams
    • sequence diagrams, Sequence Diagrams
• Advanced Encryption Standard (AES), The Usual Suspects
• adversary, Basic Concepts and Terminology
• Agile development
  • about, Why Continuous Threat Modeling?
  • threat modeling incorporated, No more waterfalling, Why Continuous Threat Modeling?
    • (see also continuous threat modeling)
• AI and automated threat modeling, Threat Modeling with ML and AI-Threat Modeling with ML and AI
• Application Security Verification Standard (ASVS), IriusRisk
• approach to threat modeling (see basics of threat modeling)
• Architecture Analysis & Design Language (AADL), How It Works, How It Works
• architecture description languages (ADLs), How It Works
• Arous, ...