If you are wanting to learn threat modeling, I highly recommend this course. I don't know how this training would lend opportunities to practice these concepts, as threat modeling is a collaborative effort, and you would need to have tangible examples to work with. Adam Shostack does a great job of providing relevant examples, pointing out where others go wrong, and emphasizing that this practice must be consistent and align with how the organization manages other issues.
Learning Threat Modeling for Security Professionals
With Adam Shostack
Liked by 1,774 users
Duration: 46m
Skill level: Beginner + Intermediate
Released: 1/2/2019
Course details
In the 21st century, no one doubts the importance of cybersecurity. Threat modeling is where it starts. Threat modeling is a framework for thinking about what can go wrong, and the foundation for everything a security professional does. This training course provides an overview of the traditional four-question framework for (1) defining what you're working on, (2) discovering what can go wrong, (3) deciding what to do about it, and (4) ensuring you've done the right things in the right ways for the systems you're delivering. Instructor Adam Shostack also reviews the STRIDE model for identifying six types of threats: spoofing, tampering, repudiation, information disclosure, denial of service, and elevation of privilege. Using a simple case study—a billing system for a media server that serves ads—Adam shows how to apply the principles and find security and privacy problems so the developer can include appropriate configurations and controls as part of the operational design and rollout.
Skills you’ll gain
Earn a sharable certificate
Share what you’ve learned, and be a standout professional in your desired industry with a certificate showcasing your knowledge gained from the course.
LinkedIn Lernen
Certificate of Completion
-
Showcase on your LinkedIn profile under “Licenses and Certificate” section
-
Download or print out as PDF to share with others
-
Share as image online to demonstrate your skill
Meet the instructor
Learner reviews
-
Joshua C.
Joshua C.
Cybersecurity Analyst | PCI DSS SME | GRC | Driving Organizations Towards Achieving Cyber Resiliency
-
-
Inhalt
What’s included
- Test your knowledge 3 quizzes
- Learn on the go Access on tablet and phone