As enterprises struggle to keep up with various forms of cyber attacks, many are discovering the benefits of threat modeling. This process is a structured way to identify threats and vulnerabilities to enterprise security and rank the risk and potential damage of each so that mitigation efforts can be prioritized. While this is a broad definition, the key to threat modeling that differentiates the technique from more general security efforts is that it is highly structured and systematic. Its … [Read more...]