Create Your First Threat Model Using a Spreadsheet

In this workshop, you’ll learn the basics of threat modeling and apply the knowledge to create a threat model following six steps right in a spreadsheet. The six-step spreadsheet template is based on the STRIDE framework, one of the most popular security threat modeling methodologies.

Agenda

• Introduction to Threat Modeling

  • What’s threat modeling

  • Threat Modeling classification: STRIDE

  • Threat Modeling elements

  • Threat Modeling process: the four-question framework

  • Applying STIDE to Threat Modeling elements

  • Cloud Threat Modeling

• Demo: using the six-step spreadsheet template to create a threat model for a two-tier web application

Resources

Written guide 

Slides: https://4550632.fs1.hubspotusercontent-na1.net/hubfs/4550632/Threat%20Modeling%20Connect/Threat%20Modeling%20Lab/Incremental%20Threat%20Modeling_Nov_2023/Threat%20Modeling%20Lab_%20Create%20Your%20First%20Threat%20Model%20Using%20an%20Excel%20Spreadsheet_Shankar%20Chebrolu.pdf

Template: https://docs.google.com/spreadsheets/d/1AbouySzNorXs7sXwnMkZYkGdWeKESnJtKK_JfiTXBIE/edit?usp=sharing

Speaker

Shankar Chebrolu, Director, Red Hat