Assignment: Threat Modeling Project

Assignment: Threat Modeling Project

Assignment: Threat Modeling Project

Permalink: https://collepals.com/assignment-2-thr…modeling-project/

STRIDE is a model-based threat modeling technique developed by Microsoft. The methodology guides the security analyst through several activities that must be conducted in order for the process to be effective.

For this assignment explain in detail how you would start a threat modeling project. Please provide explanations for each step stated.  Please state your answer in a 1-2 page paper in APA format.  Include citations and sources in APA style.

To enhance the security of information systems, enterprises are developing and adopting information system management systems. However, if an information management system is exploited, applications and the data they contain will be compromised. Therefore, it is important to perform comprehensive threat modeling throughout the enterprise.

Assignment1  THREAT  MODELING

In your own words explain (a) what is threat modeling, and (b) why it is important for an enterprise to address threat modeling extensively. Please state your answer in a 1-2 page paper in APA format.  Include citations and sources in APA style.

 Meets or exceeds established assignment criteria 40

Demonstrates an understanding of lesson concepts 20

Clearly presents well-reasoned ideas and concepts 30 

Uses proper mechanics, punctuation, sentence structure, spelling and APA structure 10

Threat modeling and security testing are similar in regard to both serve the purpose of addressing risk, however, both have their own respective specific purpose.

For this assignment identify and explain the key differences between security testing and threat modeling. Please state your answer in a 1-2 page paper in APA format.  Include citations and sources in APA style.

To enhance the security of information systems, enterprises are developing and adopting information system management systems. However, if an information management system is exploited, applications and the data they contain will be compromised. Therefore, it is important to perform comprehensive threat modeling throughout the enterprise.