Threat modeling: from infancy to maturity

Threat modeling involves the systematic identification and analysis of security threats in the context of a specific system. This paper starts from an assessment of its current state of practice, based on interactions with threat modeling professionals. We argue that threat modeling is still at a low level of maturity and identify the main criteria for successful adoption in practice. Furthermore, we identify a set of key research challenges for aligning threat modeling research to industry practice, thereby raising the technology-readiness levels of the ensuing solutions, approaches, and tools.

ISBN:978-1-4503-7126-1

Publication year:2020

BOF-keylabel:yes

IOF-keylabel:yes

Authors from:Private, Higher Education

Accessibility:Open