Risk Centric Application Threat Modeling - PASTA | NYC OWASP Risk Centric Application Threat Modeling - PASTA | NYC OWASP

Risk Centric Application Threat Modeling | NYC OWASP 2016

Written By: Versprite

Risk Centric Threat Modeling: Process for Attack Simulation and Threat Analysis


In this presentation, we take look at PASTA – the only risk centric application threat modeling methodology for threat modeling applications of any architecture/deployment type.

This presentation is based upon the book Risk Centric Threat Modeling: Process for Attack Simulation and Threat Analysis by Tony UcedaVelez and Marco M. Morana published in May 2015.

What is PASTA?

PASTA is the Process for Attack Simulation & Threat Analysis and is a risk centric threat modeling methodology aimed at identifying viable threat patterns against an application or system environment. Built around the idea of addressing likely attack patterns to high impact use cases, this approach integrates extremely well into a process of risk management.View PASTA Presentation →

PASTA Download PASTA Presentation →

Receive Security News



We are an international squad of professionals working as one.

logos