This chapter is about understanding and preparing threat models. You will understand the essential concepts of threat modeling and gain practical knowledge on using various tools for threat modeling.

We will cover the following topics in this chapter:

• Defining threat modeling
• Benefits of threat modeling
• Threat modeling terminology
• Step-by-step procedure for performing threat modeling
• Techniques for threat modeling—STRIDE, PASTA, DREAD
• Microsoft Threat Modeling Tool and SeaSponge