Description

Welcome to the Intermediate-Level Cyber Threat Modelling Training! In this course, you will build upon your foundational knowledge of cyber threat modelling and dive deeper into advanced concepts and techniques. Cyber threat modelling is a crucial practice for identifying, assessing, and mitigating potential security risks within systems and applications. This course will equip you with the skills to create more comprehensive threat models and enhance your ability to protect digital assets from a wide range of cyber threats.

Course Objectives

• Understand Threat Modelling Concepts: Participants will be introduced to the fundamental concepts and principles of threat modelling, including threat types, attack vectors, risk assessment, and threat modeling methodologies.
• Explore Threat Modelling Frameworks: Participants will explore different threat modelling frameworks such as STRIDE (Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege), DREAD (Damage,Reproducibility, Exploitability, Affected Users, Discoverability), and others.
• They will learn how to leverage these frameworks to identify potential threats and vulnerabilities.
• Identify Threats and Attack Surfaces: Participants will learn how to identify potential threats and attack surfaces within a system or application. They will examine various attack vectors, including network-based attacks, application vulnerabilities, social engineering, and insider threats.
• Assess Risk and Impact: Participants will gain practical experience in assessing the risks associated with identified threats and vulnerabilities. They will learn how to evaluate the potential impact of an attack and prioritize the identified risks based on severity and likelihood.
• Develop Mitigation Strategies: Participants will understand the importance of developing effective mitigation strategies to address identified threats. They will learn about common security controls and countermeasures that can be implemented to protect against specific threats.
• Apply Threat Modelling Techniques: Participants will have hands-on experience applying threat modelling techniques to real-world scenarios. They will work on practical exercises and case studies to identify threats, assess risks, and develop mitigation strategies.
• Integration into the Development Lifecycle: Participants will learn how to integrate threat modelling into the software development lifecycle and other relevant processes. They will explore ways to effectively communicate threat modelling findings to stakeholders and ensure security considerations are incorporated from the early stages of development.
• Best Practices and Continuous Improvement: Participants will be exposed to industry best practices and emerging trends in threat modelling. They will understand the importance of continuous improvement, ongoing monitoring, and adapting threat modelling strategies to evolving threats.

Course Outline

Course Outline for Essentials of CyberThreat Modelling