📖 What is Threat Modeling?
Threat Modeling is a structured process used to identify, quantify, and address security risks associated with an application or system during the design phase. It involves decomposing the system, identifying potential threats using frameworks like STRIDE, and determining appropriate mitigations to reduce risk.
"Study the STRIDE model carefully; the exam often asks which threat category a specific scenario falls under during the design phase."
📚 Certification: CompTIA Advanced Security Practitioner+ (CAS-004)
🔑 What are the Key Concepts of Threat Modeling?
- ▸ The STRIDE model categorizes threats into Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege to ensure comprehensive coverage.
- ▸ Data Flow Diagrams (DFDs) are used to visualize system components and data movement, helping architects identify potential attack vectors and vulnerabilities.
- ▸ Trust Boundaries mark where data transitions between different trust levels, highlighting critical points where rigorous input validation and authentication are required.
- ▸ Threat modeling is an iterative process integrated into the Secure SDLC, ensuring security controls evolve alongside changes in system architecture or requirements.
- ▸ Mitigation mapping involves assigning specific security controls to identified threats, effectively reducing the overall risk profile of the application before deployment.
🎯 How does Threat Modeling appear on the CAS-004 Exam?
You may be asked to analyze a scenario where a user can bypass authentication to access admin functions and identify this as an 'Elevation of Privilege' threat within the STRIDE framework.
A scenario might describe a system where a user denies performing a financial transaction; you must identify 'Repudiation' as the threat and suggest digital signatures as the mitigation.
Expect questions requiring you to identify the most appropriate time to conduct threat modeling within the SDLC to minimize the cost of remediating architectural flaws.
❓ Frequently Asked Questions
How does STRIDE differ from the PASTA threat modeling methodology?
STRIDE is a developer-centric approach focused on identifying technical threats, whereas PASTA is a risk-centric framework that aligns technical threats with business objectives and impact.
What is the difference between Spoofing and Repudiation in a CASP+ context?
Spoofing involves an attacker pretending to be a legitimate entity to gain access, while Repudiation occurs when a user denies performing an action due to lack of evidence.
Why is identifying trust boundaries more important than listing all possible vulnerabilities?
Trust boundaries pinpoint exactly where data transitions from untrusted to trusted zones, allowing security professionals to focus resources on the most critical points of failure.