1.
Microsoft Threat Modeling Tool
2016
Kannan Ganapathy ISO 27001 LA
Vinoth Sivasubramanian CISA,ISO27001LA,LPA

2.
Threat Modeling :-
Simplifies working with threat and creating your own threats which
with customization.
how applying a structured approach to threat scenarios during the design
phase of development helps teams more effectively and less expensively
identify security vulnerabilities, determine risks from those threats, and
establish appropriate mitigations.
 New Threat Grid
 Template Editor
 Migrating Existing Data Flow Diagrams (DFDs)

3.
Diagram Elements -

4.
Identify threats
Spoofing
Tampering
Repudiation
Information disclosure
Denial of service
Elevation of privilege
Threat manifestation
Authentication
Integrity
Nonrepudiation
Confidentiality
Availability
Authorization

5.
Analysis of Threat Modeling
 Threat Title
 Threat (STRIDE) Category
 Justification
 Interaction
 Diagram
 Last modified
 Threat State
 Threat Priority
Each threat will have a Description field, which will have content for every
auto-generated threat and a Justification field in which mitigation
information can be entered by the user.

6.
Thank you