From Attacks to Action - Building a Usable Threat Model to Drive Defensive Choices
summary
A community process maps the Verizon Data Breach Report categories into a short, prioritized set of actions drawn from the Critical Security Controls, starting from an original 10-item priority list and expanding via volunteers into vendor mappings and draft implementations with Hewlett Packard, Symantec, and McAfee. The effort produces a repeatable community volunteer workflow that turns threat feeds into specific defenses and evidence, and it explicitly aligns to the NIST Cybersecurity Framework so organizations can prioritize and prove the right controls.
AI-written summary · about
chapters (7)
- 0:00Start
- 1:52Classic Risk Equation
- 15:15The Defender's Challenges
- 17:25Attributes of a usable threat model
- 21:07Evolving a Threat Model for the Critical Security Controls
- 25:40Why a Community Threat Model?
- 26:00The Council on CyberSecurity
related talks
45mFrom Attacks to Action: An Open Community Model to Drive Defensive Choices
33mDecoding Cyber Threats: A Practical Guide to Using Attack Trees
19mThe Battle for New York: A Case Study of Applied Digital Threat Modeling at the Enterprise Level
13mQuick Look: Operationalised Risk Modeling Using the Data Breach Repository
37mThreats versus Capabilities Building Better Detect and Respond Capabilities
58mThreat Modeling In And For Your Organization
01h 11m2024 Security BSides // Adam Pennington
44mYou Are Not an Island - Threat Model as a Team