Threat Modeling for Engineers

Threat Modeling is an efficient way to pinpoint the most relevant potential security threats and vulnerabilities of a system or piece of software. This course shows you how we do it at Zühlke.

Subjects that will be discussed:

  • Threat Modeling methodologies
  • Best practices
  • Trying it yourself

Course Duration

1 day

Course Overview

Have you ever been involved in a development project where cybersecurity was handled in an unorganised manner or wasn’t taken seriously enough? For example, software developers are often driven by new features and therefore do not pay equal attention to cybersecurity.

Neglecting cybersecurity leads to uncertain guarantees on the robustness of the product. The security technical debt also limits the teams’ options to mitigate security threats.

To address product security, threat modeling is seen as a cornerstone of building secure products and applications in an efficient, organised and systematic manner. In this course, you will learn:

•    Why threat modeling is so important
•    The role it plays within the secure development lifecycle
•    Various threat modeling strategies
•    Methodologies to support threat modeling activities
•    How tools can support you with threat modeling 
•    How to perform threat modeling yourself 

The ratio of theory to practical exercises is around 1:1.

Course Goals

Upon completion of this course, you will have gained a solid understanding of the importance of threat modeling. You will also know how to perform threat modeling depending on the current development context and be able to leverage the available threat modeling tools.

Target Groups

The course is aimed at engineers, architects and security professionals with basic software/system engineering skills.

Ask for a corporate course

Get a free offer for a corporate training, tailored to your needs.

Ask for a course

Show interest in a public course

Contact us if you are interested in a public course.

Show interest