Home | VerSprite Resources

Threat Library

We are passionate about helping our clients chart a course that brings security and business together.

Embedded Device Surface Attacks | IoT Security | VerSprite Cybersecurity Advisory

Blog Post

PASTA Threat Modeling

What You Need to Know About Embedded Device Attack Surfaces

Embedded Device security is increasingly more important to discuss as more everyday and critical medical devices are equipped with them. Learn from our IoT security experts how embedded device security testing can reduce common local & remote attack surfaces.

Learn more

pasta-threat-modeling-versprite

Ebook

Organizational Threat Model

Risk-Based Security Threat Modeling: 7 Step Process for Risk Analysis

PASTA is the Process for Attack Simulation and Threat Analysis and is a risk-based threat modeling methodology aimed at identifying viable threat patterns against an application or system environment. The goal is to align business objectives with technical requirements while taking into account business impact analysis and compliance requirements.

Learn more

threat modeling

Ebook

PASTA Threat Modeling

The Process for Attack Simulation and Threat Analysis

PASTA is the Process for Attack Simulation & Threat Analysis and is a risk-centric threat modeling methodology aimed at identifying viable threat patterns against an application or system environment.

Learn more

During this talk we’ll look at both Azure and AWS components to leverage when adding threat context and ultimately an amazing threat library to your application threat model. We’ll look at exemplifying these techniques across mission critical infrastructure in energy and transportation.

Presentation

Microsoft Azure Cloud Computing

Building a Valid Threat Library for Cloud-Based Applications

Download this presentation to take a look at Azure and AWS components and how to leverage both when adding threat context and ultimately an amazing threat library to your application threat model. In addition, learn how to exemplify these techniques across mission critical infrastructure in energy and transportation.

Learn more

Winning the Security Race with Faith in Zero Trust

Webinar

Role of Zero Trust in Future Enterprise Security

Traditional enterprise security models were built on an assumption that everything inside the network – whether its devices or people – is trustworthy. However, the evolution of attack sophistication and the proliferation of BYOD has brought greater risk.

Learn more

This course begins by focusing on the overall importance of threat modeling in product/ application development and then quickly dives into helping students deconstruct product/ application components into use cases, abuse cases, call/data flows, trust boundaries, attack vectors and most importantly countermeasures.

Blog Post

Risk Centric Threat Models for Internet of Things (IoT) & Medical Devices

The course is provided over two days and begins with a very quick overview of threat modeling concepts, common inputs to the process, integration activities to secure SDLC workflows and extends into applying the 7 stages of the PASTA methodology to target IoT applications in the healthcare medical field.

Learn more

Modeling Threats for Applications

Video

AppSec EU 2017: Modeling Threats for Applications

This video centers around the idea of modeling threats for applications based upon a higher propensity of threat intelligence, how to harvest and correlate threat patterns to your threat model and also how to correlate a threat model to defining preemptive controls and countermeasures to include in the overall design.

Learn more

Why-Threat-Free-Threat-Modeling-Doesn't-Work

Blog Post

Threat Intelligence

Why Threat Free Threat Modeling Doesn’t Work

The idea of threat free threat models may make no sense, but nonetheless this is a growing misconception by some just coming into the practice of application threat modeling.

Learn more

We are an international squad of professionals working as one.

Email

[email protected]

logos