Build threat modeling skills with practical advanced techniques to enhance risk analysis, optimize security measures, and stay ahead of emerging threats in the complex cybersecurity landscape
Free with your book: DRM-free PDF version + access to Packt's next-gen Reader*
Key Features:
- Identify and mitigate security threats across software, cloud, mobile, IoT, and supply chains using STRIDE, PASTA, and MITRE ATT&CK
- Learn from real-world case studies showing practical threat modeling applications across industries
- Build threat modeling programs with the right team, tools, SDLC integration, and continuous improvement
Book Description:
Threat modeling has become a cornerstone of modern cybersecurity, yet it is often overlooked, leaving security gaps that attackers can exploit. With the rise in system complexity, cloud adoption, AI-driven threats, and stricter compliance requirements, security teams need a structured approach to proactively stop and spot risks before attackers do. This book does exactly that by providing actionable insights into leveraging industry best practices and emerging technologies to secure systems. It breaks down the fundamentals of threat modeling and walks you through key frameworks and tools such as STRIDE, MITRE ATT&CK, PyTM, and Attack Paths, helping you choose the right model and create a roadmap tailored for business. You'll see how to use leading threat modeling tools, identify and prioritize potential threats, and integrate these practices into the software development life cycle to catch risks early. The book also examines how AI can strengthen analysis and streamline security decision-making for faster, stronger defenses.
By the end, you'll have everything you need to build systems that anticipate and withstand evolving threats, keeping your organization secure in an ever-changing digital landscape.
What You Will Learn:
- Create foundational threat modeling artifacts like Data Flow Diagrams and security architecture diagrams to visualize system threats.
- Understand the relationship between vulnerabilities (exploitable weaknesses) and threats (sources of harm).
- Analyze real-world case studies to see how threat modeling is applied in industry incidents.
- Evaluate and compare popular threat modeling tools, both open source and commercial.
- Explore advanced topics, including threat modeling for cloud environments and integrating with DevSecOps.
Who this book is for:
This book is for cybersecurity professionals, security consultants, penetration testers, and compliance managers seeking to integrate threat modeling into their assessment methodologies and client engagements. It's also ideal for software architects, DevOps engineers, risk managers, and organizational leaders responsible for identifying, assessing, and mitigating security risks in their technological environments. Whether you're new to threat modeling or looking to enhance your existing expertise, this book helps you with foundational knowledge as well as advanced techniques.
Table of Contents
- Threat Modeling Methodologies
- Understanding and Evaluating Threats and Risks
- Prioritizing Risks Found in Threat Modeling
- Threat Modeling of Software
- Threat Modeling of Cloud and Infrastructure
- Threat Modeling the Supply Chain
- Mobile and IoT Threat Modeling
- AI and the Threat Modeling of LLMs
- Building a Threat Modeling Practice
- Future Directions in Threat Modeling
外文書商品之書封，為出版社提供之樣本。實際出貨商品，以出版社所提供之現有版本為主。部份書籍，因出版社供應狀況特殊，匯率將依實際狀況做調整。
無庫存之商品，在您完成訂單程序之後，將以空運的方式為你下單調貨。為了縮短等待的時間，建議您將外文書與其他商品分開下單，以獲得最快的取貨速度，平均調貨時間為1~2個月。
為了保護您的權益，「三民網路書店」提供會員七日商品鑑賞期(收到商品為起始日)。
若要辦理退貨，請在商品鑑賞期內寄回，且商品必須是全新狀態與完整包裝(商品、附件、發票、隨貨贈品等)否則恕不接受退貨。
