Recording

Create Your First Threat Model Using a Spreadsheet

  • 11 April 2023
  • 2 replies
  • 806 views
Create Your First Threat Model Using a Spreadsheet
Userlevel 5

In this workshop, you’ll learn the basics of threat modeling and apply the knowledge to create a threat model following six steps right in a spreadsheet. The six-step spreadsheet template is based on the STRIDE framework, one of the most popular security threat modeling methodologies.

Agenda

  • Introduction to Threat Modeling

    • What’s threat modeling

    • Threat Modeling classification: STRIDE

    • Threat Modeling elements

    • Threat Modeling process: the four-question framework

    • Applying STIDE to Threat Modeling elements

    • Cloud Threat Modeling

  • Demo: using the six-step spreadsheet template to create a threat model for a two-tier web application

 

Resources

Written guide 

Slides: https://4550632.fs1.hubspotusercontent-na1.net/hubfs/4550632/Threat%20Modeling%20Connect/Threat%20Modeling%20Lab/Incremental%20Threat%20Modeling_Nov_2023/Threat%20Modeling%20Lab_%20Create%20Your%20First%20Threat%20Model%20Using%20an%20Excel%20Spreadsheet_Shankar%20Chebrolu.pdf

Template: https://docs.google.com/spreadsheets/d/1AbouySzNorXs7sXwnMkZYkGdWeKESnJtKK_JfiTXBIE/edit?usp=sharing

Speaker

Shankar Chebrolu, Director, Red Hat


2 replies

Thanks for a deep insight on the most beautiful template for threat modeling, definitely a very useful and a wonderful session.

Thanks for this interesting and simple way of threat modelling using a spread sheet template. 

Reply


V2