Sign-In
Cart
Threat Modeling Gameplay with EoP: A reference manual for spotting threats in software architecture
Paperback
ISBN13: 9781804618974
Publisher: Packt Publishing
Published: Aug 9 2024
Pages: 256
Weight: 0.98
Height: 0.54 Width: 7.50 Depth: 9.25
Language: English
Work with over 150 real-world examples of threat manifestation in software development and identify similar design flaws in your systems using the EoP game, along with actionable solutions
Key Features:
- Apply threat modeling principles effectively with step-by-step instructions and support material
- Explore practical strategies and solutions to address identified threats, and bolster the security of your software systems
- Develop the ability to recognize various types of threats and vulnerabilities within software systems
- Purchase of the print or Kindle book includes a free PDF eBook
Book Description:
Are you looking to navigate security risks, but want to make your learning experience fun? Here's a comprehensive guide that introduces the concept of play to protect, helping you discover the threats that could affect your software design via gameplay.
Each chapter in this book covers a suit in the Elevation of Privilege (EoP) card deck (a threat category), providing example threats, references, and suggested mitigations for each card. You'll explore the methodology for threat modeling-Spoofing, Tampering, Repudiation, Information Disclosure, and Elevation of Privilege (S.T.R.I.D.E.) with Privacy deck and the T.R.I.M. extension pack. T.R.I.M. is a framework for privacy that stands for Transfer, Retention/Removal, Inference, and Minimization. Throughout the book, you'll learn the meanings of these terms and how they should be applied. From spotting vulnerabilities to implementing practical solutions, the chapters provide actionable strategies for fortifying the security of software systems.
By the end of this book, you will be able to recognize threats, understand privacy regulations, access references for further exploration, and get familiarized with techniques to protect against these threats and minimize risks.
What You Will Learn:
- Understand the Elevation of Privilege card game mechanics
- Get to grips with the S.T.R.I.D.E. threat modeling methodology
- Explore the Privacy and T.R.I.M. extensions to the game
- Identify threat manifestations described in the games
- Implement robust security measures to defend against the identified threats
- Comprehend key points of privacy frameworks, such as GDPR to ensure compliance
Who this book is for:
This book serves as both a reference and support material for security professionals and privacy engineers, aiding in facilitation or participation in threat modeling sessions. It is also a valuable resource for software engineers, architects, and product managers, providing concrete examples of threats to enhance threat modeling and develop more secure software designs. Furthermore, it is suitable for students and engineers aspiring to pursue a career in application security. Familiarity with general IT concepts and business processes is expected.
Table of Contents
- Game Play
- Spoofing
- Tampering
- Repudiation
- Information Disclosure
- Denial of Service
- Elevation of Privilege
- Privacy
- Transfer
- Retention/Removal
- Inference
- Minimization
- Glossary
- Further Reading
Also in
Computer Security
Spies, Lies, and Cybercrime: Cybersecurity Tactics to Outsmart Hackers and Disarm Scammers
O'Neill, Eric
Hardcover
Digital Ethics in the Age of AI: Navigating the ethical frontier today and beyond
Mehan, Julie
Paperback
The Cybernetic Society: How Humans and Machines Will Shape the Future Together
Husain, Amir
Hardcover
Linux Basics for Hackers, 2nd Edition: Getting Started with Networking, Scripting, and Security in Kali
Occupytheweb
Paperback
Isc2 Cissp Certified Information Systems Security Professional Official Study Guide & Practice Tests Bundle
Stewart, James Michael
Gibson, Darril
Chapple, Mike
Paperback
Password Logbook (Hip Floral): Keep Track of Usernames, Passwords, Web Addresses in One Easy and Organized Location
Editors of Rock Point
Hardcover
Sandworm: A New Era of Cyberwar and the Hunt for the Kremlin's Most Dangerous Hackers
Greenberg, Andy
Paperback
Comptia A+ Complete Study Guide, 2-Volume Set: Volume 1 Core 1 Exam 220-1201 and Volume 2 Core 2 Exam 220-1202
Docter, Quentin
Buhagiar, Jon
Paperback
Chasing Shadows: Cyber Espionage, Subversion, and the Global Fight for Democracy
Deibert, Ronald J.
Hardcover
Comptia Security+ Study Guide with Over 500 Practice Test Questions: Exam Sy0-701
Chapple, Mike
Seidl, David
Paperback
Raising Humans in a Digital World: Helping Kids Build a Healthy Relationship with Technology
Graber, Diana
Paperback
Countdown to Zero Day: Stuxnet and the Launch of the World's First Digital Weapon
Zetter, Kim
Paperback
Data Engineering for Cybersecurity: Build Secure Data Pipelines with Free and Open-Source Tools
Bonifield, James
Paperback
Cult of the Dead Cow: How the Original Hacking Supergroup Might Just Save the World
Menn, Joseph
Paperback
The Future of Hacking: The Rise of Cybercrime and the Fight to Keep Us Safe
Scherling, Laura S.
Hardcover
Dragnet Nation: A Quest for Privacy, Security, and Freedom in a World of Relentless Surveillance
Angwin, Julia
Paperback
Isc2 Cissp Certified Information Systems Security Professional Official Study Guide
Chapple, Mike
Stewart, James Michael
Gibson, Darril
Paperback
Hacking and Security: The Comprehensive Guide to Penetration Testing and Cybersecurity
Gebeshuber, Klaus
Kloep, Peter
Kofler, Michael
Paperback
Serious Cryptography, 2nd Edition: A Practical Introduction to Modern Encryption
Aumasson, Jean-Philippe
Paperback
Tor: Tor and the Deep Web: A Guide to Become Anonymous Online, Conceal Your IP Address, Block NSA Spying and Hack!
Welsh, Joshua
Paperback
Internet Password Logbook (Red Leatherette): Keep Track of Usernames, Passwords, Web Addresses in One Easy and Organized Location
Editors of Rock Point
Hardcover
A Hacker's Mind: How the Powerful Bend Society's Rules, and How to Bend Them Back
Schneier, Bruce
Paperback
Comptia A+ Complete Certification Kit: Core 1 Exam 220-1201 and Core 2 Exam 220-1202
McMillan, Troy
Docter, Quentin
Buhagiar, Jon
Paperback
Comptia A+ Complete Practice Tests: Core 1 Exam 220-1201 and Core 2 Exam 220-1202
O'Shea, Audrey
Paperback
Humorous Cryptograms: 300 Large Print Puzzles To Keep You Entertained (Large Print Edition)
Nest, Game
Paperback
Shit I Can't Remember: Keep track of usernames, passwords, web addresses in one easy & organized location
Books, Family's
Paperback
Linux Basics for Hackers: Getting Started with Networking, Scripting, and Security in Kali
Occupytheweb
Paperback
Hacking Exposed Industrial Control Systems: ICS and Scada Security Secrets & Solutions
Singer, Bryan
Shbeeb, Aaron
Bodungen, Clint
Paperback
Cyber War: The Next Threat to National Security and What to Do about It
Clarke, Richard A.
Knake, Robert
Paperback
Comptia A+ Complete Review Guide: Core 1 Exam 220-1201 and Core 2 Exam 220-1202
McMillan, Troy
Paperback
Faik: A Practical Guide to Living in a World of Deepfakes, Disinformation, and Ai-Generated Deceptions
Carpenter, Perry
Hardcover
Container Security: Fundamental Technology Concepts That Protect Cloud Native Applications
Rice, Liz
Paperback
Cybersecurity for Everyone: A Human-Centered Approach to Protecting Yourself and Your Community
Olieslaeger, Cathy
Paperback
Mobile Forensic Investigations: A Guide to Evidence Collection, Analysis, and Presentation, Second Edition
Reiber, Lee
Paperback
Hacking: Computer Hacking for beginners, how to hack, and understanding computer security!
Dodson, Adam
Hardcover
Blown to Bits: Your Life, Liberty, and Happiness After the Digital Explosion
Ledeen, Ken
Lewis, Harry
Abelson, Hal
Paperback
AWS Certified Security Study Guide: Specialty (Scs-C02) Exam
Mu¿oz, Mauricio
Moraes, Alexandre M. S. P.
Goldfarb, Dario Lucas
Paperback
Nmap Network Scanning: The Official Nmap Project Guide to Network Discovery and Security Scanning
Lyon, Gordon
Fyodor
Paperback
Cult of the Dead Cow: How the Original Hacking Supergroup Might Just Save the World
Menn, Joseph
Paperback
Governance, Risk, and Compliance (GRC) in Cybersecurity: All you need to know
Relington, James
Paperback
Cyber Threat Hunters Handbook: Applying advanced analytics, automation, and collaborative intelligence for digital defense (English Edition)
Pereira Quiceno, David F.
Paperback
Comptia A+ Certmike: Prepare. Practice. Pass the Test! Get Certified!: Core 2 Exam 220-1202
Chapple, Mike
Paperback
The Web Application Hacker's Handbook: Finding and Exploiting Security Flaws
Stuttard, Dafydd
Pinto, Marcus
Paperback
Locksport: A Hackers Guide to Lockpicking, Impressioning, and Safe Cracking
Burrough, Matt
Belgers, Walter
Weyers, Jos
Paperback
Crypto Conned My 200K Nightmare: And 10 Key Steps To Safeguard Your Future
Holliday, Ed Doc
Paperback
Web Application Security: Exploitation and Countermeasures for Modern Web Applications
Hoffman, Andrew
Paperback
Comptia A+ Certmike: Prepare. Practice. Pass the Test! Get Certified!: Core 1 Exam 220-1201
Chapple, Mike
Paperback
Cybersecurity - Attack and Defense Strategies - Third Edition: Improve your security posture to mitigate risks and prevent attackers from infiltrating
Diogenes, Yuri
Ozkaya, Erdal
Paperback
Esclavos del Algoritmo. Manual de Resistencia En La Era de la Inteligencia Artificial / Slaves of the Algorithm
de Rivera, Laura G.
Paperback
Cybersecurity for Everyone: Securing your home or small business network
Sadler, Terence L.
Paperback
Cisa Certified Information Systems Auditor Study Guide: Covers 2024 - 2029 Exam Objectives
Gregory, Peter H.
Chapple, Mike
Paperback
Hacking & Tor: The Complete Beginners Guide To Hacking, Tor, & Accessing The Deep Web & Dark Web
Jones, Jack
Paperback
Certificate of Cloud Security Knowledge (Ccsk V5) Study Guide: In-Depth Guidance and Practice
Thompson, Graham
Paperback
Principles of AI Governance and Model Risk Management: Master the Techniques for Ethical and Transparent AI Systems
Sayles, James
Paperback
The Art of Deception: Controlling the Human Element of Security
Mitnick, Kevin D.
Simon, William L.
Paperback
Learn Computer Forensics - Second Edition: Your one-stop guide to searching, analyzing, acquiring, and securing digital evidence
Oettinger, William
Paperback
Wtf Is My Password: Keep track of usernames, passwords, web addresses in one easy & organized location - Orange Cover
Pray, Norman M.
Paperback
Mastering Palo Alto Networks - Second Edition: Build, configure, and deploy network solutions for your infrastructure using features of PAN-OS
'Reaper', Tom Piens Aka
Paperback
Securing the Digital Frontier: Cyber Security for Responsible Citizens and Strategic Thinkers
Martin, Andrew
Hardcover
Ghidra Software Reverse-Engineering for Beginners - Second Edition: Master the art of debugging, from understanding code to mitigating threats
Pérez, David Álvarez
Tiwari, Ravikant
Paperback
Understanding the Digital World: What You Need to Know about Computers, the Internet, Privacy, and Security, Second Edition
Kernighan, Brian W.
Paperback
Cism Certified Information Security Manager All-In-One Exam Guide [With CD (Audio)]
Gregory, Peter H.
Paperback
The Mathematics of Secrets: Cryptography from Caesar Ciphers to Digital Encryption
Holden, Joshua
Paperback
Identity Security for Software Development: Best Practices That Every Developer Must Know
Barker, Matt
Walsh, John
Ailon, Uzi
Paperback
Understand the Cyber Attacker Mindset: Build a Strategic Security Programme to Counteract Threats
Armstrong-Smith, Sarah
Paperback
Building a Career in Cybersecurity: The Strategy and Skills You Need to Succeed
Diogenes, Yuri
Paperback
The Online World, What You Think You Know and What You Don't: 4 Critical Tools for Raising Kids in the Digital Age
Mankarious, Rania
Paperback
Ethical Hacking for Beginners: A Step by Step Guide for you to Learn the Fundamentals of CyberSecurity and Hacking
Nastase, Ramon Adrian
Paperback
SSL/TLS Under Lock and Key: A Guide to Understanding SSL/TLS Cryptography
Schatten, Jeremy
Baka, Paul
Paperback
Firewalls Don't Stop Dragons: A Step-By-Step Guide to Computer Security and Privacy for Non-Techies
Parker, Carey
Paperback
Gray Hat Hacking: The Ethical Hacker's Handbook, Sixth Edition
Linn, Ryan
Sims, Stephen
Harper, Allen
Paperback
Building Secure and Reliable Systems: Best Practices for Designing, Implementing, and Maintaining Systems
Blankinship, Paul
Beyer, Betsy
Adkins, Heather
Paperback
Practical Cybersecurity Architecture - Second Edition: A guide to creating and implementing robust designs for cybersecurity architects
Moyle, Ed
Kelley, Diana
Paperback
Logical Investigative Methods: Critical Thinking and Reasoning for Successful Investigations
Girod, Robert J.
Paperback
Hacking Etico 101 - Cómo hackear profesionalmente en 21 días o menos!: 2da Edición. Revisada y Actualizada a Kali 2.0.
Astudillo B., Karina
Paperback
Intelligent Continuous Security: Ai-Enabled Transformation for Seamless Protection
Hornbeek, Marc
Paperback
Hands on Hacking: Become an Expert at Next Gen Penetration Testing and Purple Teaming
Hickey, Matthew
Arcuri, Jennifer
Paperback
Redefining Hacking: A Comprehensive Guide to Red Teaming and Bug Bounty Hunting in an Ai-Driven World
Thurner, Wesley
Santos, Omar
Lazzara, Savannah
Paperback
Iapp Cipp / Us Certified Information Privacy Professional Study Guide
Chapple, Mike
Shelley, Joe
Paperback
Achieve Comptia Security+ Sy0-701 Exam Success: The Concise Certification Guide for Today's Busy Professional
Edwards, Jason
Paperback
Network Programmability and Automation: Skills for the Next-Generation Network Engineer
Oswalt, Matt
Adell, Christian
Lowe, Scott S.
Paperback
Mastering Linux Security and Hardening - Third Edition: A practical guide to protecting your Linux system from cyber attacks
Tevault, Donald a.
Hardcover