Home | VerSprite Resources

Threat Library

We are passionate about helping our clients chart a course that brings security and business together.

During this talk we’ll look at both Azure and AWS components to leverage when adding threat context and ultimately an amazing threat library to your application threat model. We’ll look at exemplifying these techniques across mission critical infrastructure in energy and transportation.

Presentation

Microsoft Azure Cloud Computing

Building a Valid Threat Library for Cloud-Based Applications

Download this presentation to take a look at Azure and AWS components and how to leverage both when adding threat context and ultimately an amazing threat library to your application threat model. In addition, learn how to exemplify these techniques across mission critical infrastructure in energy and transportation.

Learn more

Winning the Security Race with Faith in Zero Trust

Webinar

Role of Zero Trust in Future Enterprise Security

Traditional enterprise security models were built on an assumption that everything inside the network – whether its devices or people – is trustworthy. However, the evolution of attack sophistication and the proliferation of BYOD has brought greater risk.

Learn more

This course begins by focusing on the overall importance of threat modeling in product/ application development and then quickly dives into helping students deconstruct product/ application components into use cases, abuse cases, call/data flows, trust boundaries, attack vectors and most importantly countermeasures.

Blog Post

Healthcare & Wellness Industry

Risk Centric Threat Models for Internet of Things (IoT) & Medical Devices

The course is provided over two days and begins with a very quick overview of threat modeling concepts, common inputs to the process, integration activities to secure SDLC workflows and extends into applying the 7 stages of the PASTA methodology to target IoT applications in the healthcare medical field.

Learn more

Modeling Threats for Applications

Video

AppSec EU 2017: Modeling Threats for Applications

This video centers around the idea of modeling threats for applications based upon a higher propensity of threat intelligence, how to harvest and correlate threat patterns to your threat model and also how to correlate a threat model to defining preemptive controls and countermeasures to include in the overall design.

Learn more

Why-Threat-Free-Threat-Modeling-Doesn't-Work

Blog Post

Threat Modeling

Why Threat Free Threat Modeling Doesn’t Work

The idea of threat free threat models may make no sense, but nonetheless this is a growing misconception by some just coming into the practice of application threat modeling.

Learn more

We are an international squad of professionals working as one.

Email

[email protected]

logos