Evaluation of Threat Models

Abstract

Abstract: Information system security is the integrity and safety of its resources and activities. In the cyber world, it can be almost impossible to trace sophisticated attacks to their true source. The anonymity enjoyed by the malicious user or cyber attackers pose a grave threat to the global information society. Cyber threat modelling is an analytical process that is used to identify the potential threats against a system or an organization. It is a core activity and a fundamental practice in the process of building trusted technology. Threat modelling has been identified as one of the best "return on investment" activities in order to identify and address design flaws. Some threat model methods focus on identifying threats and security issues while some methods also perform assessment of the resulting risk.