Cloud Threat Modeling - from Architecture Design to Application Development
summary
Threat modeling for cloud systems aims to identify the actual attack surface and prioritize defenses using concrete artifacts: Microsoft Threat Modeling and STRIDE for a stepwise process, CAPEC/MITRE ATT&CK and CWE for known techniques, and the Cloud Security Alliance’s Cloud Controls Matrix plus a published cloud penetration testing playbook for validations (CSA lists ~92,000 members across 300 organizations). The team publishes threat modeling cards and deep-dive case studies; an attack-tree example (Home Alone) shows layered countermeasures delaying attackers rather than preventing every compromise.
AI-written summary · about
chapters (21)
- 0:00Intro
- 1:39Why Threat Modeling?
- 3:02Threat Modeling (System/Software Centric)
- 3:57Attack Modeling (Attack Centric)
- 5:54What To Consider When Threat Modeling
- 7:08There are Five Major Threat Modeling Steps
- 8:31Threat Modeling (with Common Attacks)
- 9:58Threat Modeling (Attack Tree Example)
- 13:59Home Alone Attack Tree (Example) - Continued
- 21:52Simple Threat Model (Trojan Threat Model Example)
- 23:55STRIDE Threat Categories
- 25:40Cloud Security Alliance's Top Threats Working Group
- 27:26Cloud Controls Matrix (CCM) 4.0 CCM
- 28:14CSA Top Threats Cloud Threat Modeling
- 29:37Cloud Threat Modeling Cards
- 31:05TT:DD Case Study Scenario - Dow Jones 2019
- 33:08Cloud Threat Modeling Asset Provenance & Pedigree
- 34:22Same Elasticsearch "Product"; Different Vulnerabilities
- 35:14Threat Modeling Consistency
- 36:04Naming Threats
- 37:12How To Apply What We Have Covered
related talks
32mIntro to Threat Modeling in the Cloud
53mPractical Threat Modeling for real-world and Cloud Situations in our hybrid and W...
01h 00mThreat Modeling for Secure Software Design
46mThreat modeling is on the rise
43mThreat modeling
57mUnlocking Threat Modeling
01h 00mLayered Threat Modeling: An Architectural Approach
44mImproving Cyber Risk Management with Threat Modeling