Applied Threat Modeling

Threat modeling is design-time security analysis. Identifying threats and required mitigations before code is written, before architecture is finalized, before deployment. Done well, threat modeling prevents entire classes of vulnerabilities from existing. Done poorly, it becomes documentation theater that doesn't change designs. This course covers threat modeling as practice: methodologies, facilitation, integration with SDLC, and producing outputs that drive secure design.