{"id":10380,"date":"2020-10-08T15:53:47","date_gmt":"2020-10-08T14:53:47","guid":{"rendered":"https:\/\/caroli.org\/en\/?p=10380"},"modified":"2021-04-26T10:25:13","modified_gmt":"2021-04-26T09:25:13","slug":"threat-modeling","status":"publish","type":"post","link":"https:\/\/caroli.org\/en\/threat-modeling\/","title":{"rendered":"APA Threat modeling"},"content":{"rendered":"

Threat modeling is a process by which potential threats can be identified, enumerated, and mitigations can be prioritized. Depending on your inception context, you might have to explicitly add an activity for raising the conversation and listing the threat scenarios to be considered. The APA threat modeling activity organize the threats by exploring the Attackers,<\/strong> the Principals<\/strong> and the Assets.<\/strong><\/em><\/p>\n

Step by step:<\/strong><\/p>\n

    \n
  1. \n
      \n
    1. \n
        \n
      1. Explain the following template to everyone: Attackers<\/strong> use Principals<\/strong> to get Assets<\/strong><\/em><\/li>\n<\/ol>\n<\/li>\n<\/ol>\n

        – Attacker<\/strong> \u2013the threat agent, the individual or organisation who performs the malicious activities to an asset.
        \n– Principal<\/strong> \u2013 the entity that can be authenticated
        \n– Asset<\/strong> \u2013 the valuable data and\/or equipment to be secure<\/p>\n

          \n
        1. Ask the participants to list the Attackers, the Principals and the Assets<\/li>\n
        2. Describe the threats by combining Attackers, Principals and Assets into the template<\/li>\n
        3. Have a conversation about the threats (consider categorising and rating each threat)<\/li>\n<\/ol>\n
          \"\"

          step 2 example (obfuscated for confidentiality)<\/p><\/div>\n

          \"\"

          Example: Hactivist uses Website to get Bank account info<\/p><\/div>\n

          I learned this activity from Rodrigo Rech<\/a>, a security specialist.<\/li>\n<\/ol>\n

           <\/p>\n

          >> This content is part of a series on\u00a0inception activities<\/a>.<\/p>\n

           <\/p>\n","protected":false},"excerpt":{"rendered":"

          Threat modeling is a process by which potential threats can be identified, enumerated, and mitigations can be prioritized. Depending on your inception context, you might have to explicitly add an activity for raising the conversation and listing the threat scenarios to be considered. The APA threat modeling activity organize the threats by exploring the Attackers, […]<\/p>\n","protected":false},"author":1,"featured_media":10383,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"categories":[2162],"tags":[],"inception_activities":[2158],"colaboradores":[],"class_list":["post-10380","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-inception-activities","inception_activities-technical"],"_links":{"self":[{"href":"https:\/\/caroli.org\/en\/wp-json\/wp\/v2\/posts\/10380","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/caroli.org\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/caroli.org\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/caroli.org\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/caroli.org\/en\/wp-json\/wp\/v2\/comments?post=10380"}],"version-history":[{"count":0,"href":"https:\/\/caroli.org\/en\/wp-json\/wp\/v2\/posts\/10380\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/caroli.org\/en\/wp-json\/wp\/v2\/media\/10383"}],"wp:attachment":[{"href":"https:\/\/caroli.org\/en\/wp-json\/wp\/v2\/media?parent=10380"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/caroli.org\/en\/wp-json\/wp\/v2\/categories?post=10380"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/caroli.org\/en\/wp-json\/wp\/v2\/tags?post=10380"},{"taxonomy":"inception_activities","embeddable":true,"href":"https:\/\/caroli.org\/en\/wp-json\/wp\/v2\/inception_activities?post=10380"},{"taxonomy":"colaboradores","embeddable":true,"href":"https:\/\/caroli.org\/en\/wp-json\/wp\/v2\/colaboradores?post=10380"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}