Pasta

PASTA provides the framework for integrating existing information security, security engineering and risk management disciplines.

The purpose of PASTA (Process for Attack Simulation and Threat Analysis) is to provide a process for simulating attacks to applications, analyzing cyber threats that originate them and mitigate cybercrime risks that these attacks and threats pose to organizations. PASTA consists of a seven stage process for simulating attacks and analyzing threats to an application environment with the objective of minimizing risk and associated impact to the business. By following this process, businesses can determine the adequate level of countermeasures that can be deployed to mitigate the risk from cyberthreats and attacks to applications.