Threat Modeling - Jim DelGrosso

Threat Modeling, by Jim DelGrosso

The session begins by describing the threat model process we use at Cigital. We will walk through an in-class example applying the process to identify potential flaws in a system.

Learning objectives

Describe terminology used when threat modeling
Describe a process for threat modeling a system
Perform a threat model for some fictitious system

Jim DelGrosso is a Principal Consultant at Cigital with over 30 years of experience working for software development and consulting organizations.
At Cigital, Jim heads up the Architecture Analysis practice with the mission to analyze the architecture and design of systems to identify flaws and provide our customers contextual guidance to remediate or mitigate those flaws.