Home | VerSprite Resources

PASTA Threat Modeling

We are passionate about helping our clients chart a course that brings security and business together.

Penetration Test

Blog Post

Security Vulnerabilities

Penetration Testing Methodology: Emulating Realistic Attacks by a Malicious Actor

The foundation of VerSprite’s penetration testing service is based on emulating realistic attacks by a malicious actor through the use of PASTA (Process for Attack Simulation and Threat Analysis).

Learn more

RACI PASTA Diagram VerSprite

Blog Post

PASTA Threat Modeling

PASTA Threat Modeling RACI Diagram

RACI (Responsible – Accountable – Consulted – Informed) is a role distribution diagram used in PASTA threat modeling methodology. It helps companies adopt threat modeling, and leverage the roles within an organization and its InfoSec department. It is a clear visual to save your team time and resources.

Learn more

7 Stages of PASTA Threat Modeling | VerSprite Cyber Security

Blog Post

Healthcare & Wellness Industry

What is PASTA Threat Modeling?

PASTA threat modeling is a leading threat model methodology that allows you to realize an attacker’s motivations, perform risk analysis, and prioritize risks based on their business impact. This article breaks down all seven stages of the process.

Learn more

Blog Post

Process for Attack Simulation & Threat Analysis

Companies Using VMware ESXi Are Being Targeted by Ransomware

Companies using VMware ESXi are being targeted by ransomware-as-a-service, resulting in encrypted virtual hard drives. Learn the business impact of this attack and get mitigation recommendations from VerSprite’s Threat Intelligence Group.

Learn more

Webinar

Organizational Threat Model

VerSprite Cybersecurity Discusses Sunburst and Vendor Supply Chain Attacks

Sit back and listen to part 2 of our discussion on FireEye’s breach, SolarWinds Sunburst supply chain attack. We’ll cover updates, how to protect against supply chain attacks with organizational threat models, and debate on the risks and benefits of an open disclosure community.

Learn more

Webinar

PASTA Threat Modeling

Using Risk-Based Threat Modeling to Protect Your Supply Chain

Why are supply chains a popular target for cybercriminals? VerSprite CEO, Tony UcedaVélez, introduces our risk-based threat modeling approach, PASTA, and how it allows organizations to better protect their supply chain software from threat actors.

Learn more

Presentation

Security Awareness Training

Application Security on a Dime 2020

In this presentation, VerSprite will steer attendees through the developer benefits, helpful security guides, and break from the storm that collaboratives like OWASP offer. We will also share some trade-favorite technologies, security tools, and techniques.

Learn more

Presentation

Security Awareness Training

VerSprite To Speak at ISSA NC’s Security Summit

VerSprite Spoke at the 2020 Triad of NC ISSA Online Security Summit The ISSA Triad of NC Chapter hosted a virtual two-day Security Summit on July 24th and 25th. Attendees heard presentations on security and technologies. This virtual educational opportunity was recorded and is now available on-demand. To rewatch lectures by VerSprite, visit the links …

Continue reading “VerSprite To Speak at ISSA NC’s Security Summit”

Learn more

Embedded Device Surface Attacks | IoT Security | VerSprite Cybersecurity Advisory

Blog Post

What You Need to Know About Embedded Device Attack Surfaces

Embedded Device security is increasingly more important to discuss as more everyday and critical medical devices are equipped with them. Learn from our IoT security experts how embedded device security testing can reduce common local & remote attack surfaces.

Learn more

We are an international squad of professionals working as one.

Email

[email protected]

logos