Threat Modeling for Engineers

Course Duration

1 day

Course Overview

Have you ever been involved in a development project where cybersecurity was handled in an unorganised manner or wasn’t taken seriously enough? For example, software developers are often driven by new features and therefore do not pay equal attention to cybersecurity.

Neglecting cybersecurity leads to uncertain guarantees on the robustness of the product. The security technical debt also limits the teams’ options to mitigate security threats.

To address product security, threat modeling is seen as a cornerstone of building secure products and applications in an efficient, organised and systematic manner. In this course, you will learn:

•    Why threat modeling is so important
•    The role it plays within the secure development lifecycle
•    Various threat modeling strategies
•    Methodologies to support threat modeling activities
•    How tools can support you with threat modeling 
•    How to perform threat modeling yourself 

The ratio of theory to practical exercises is around 1:1.

Course Goals

Upon completion of this course, you will have gained a solid understanding of the importance of threat modeling. You will also know how to perform threat modeling depending on the current development context and be able to leverage the available threat modeling tools.

Target Groups

The course is aimed at engineers, architects and security professionals with basic software/system engineering skills.