The Community for Technology Leaders
Green Image
Issue No. 01 - January/February (2008 vol. 25)
ISSN: 0740-7459
pp: 28-34
Tim Baeten , Ford Motor Company
Jeffrey A. Ingalsbe , Ford Motor Company
Nancy R. Mead , Carnegie Mellon University
Louis Kunimatsu , Ford Motor Company
Ford Motor Company is introducing threat modeling on strategically important IT applications and business processes. The objective is to support close collaboration between the IT security group and its internal business customers in analyzing threats and better understanding risk. For this purpose, a core group of security personnel have piloted Microsoft?s Threat Analysis and Modeling process and tool on a dozen targets. This article discusses this process, along with the challenges and successes of its ongoing deployment in the organization. This article is part of a special issue on Security of the Rest of Us.
threat modeling, risk assessment, DREAD, threat analysis, risk management
Tim Baeten, Jeffrey A. Ingalsbe, Nancy R. Mead, Louis Kunimatsu, "Threat Modeling: Diving into the Deep End", IEEE Software, vol. 25, no. , pp. 28-34, January/February 2008, doi:10.1109/MS.2008.25
114 ms
(Ver 3.1 (10032016))