Securing critical application(s) and data is crucial for every organization. New techniques and methodologies are being developed every day to steal your mission critical information to perform illegitimate activities. In spite of the best of the infrastructure, attackers are able to break into your network and steal critical data resulting into financial and credibility loss for your organization.
Application developers be it your own in-house developers or COTS application developers, are under constant pressure to deliver projects on time. In order to meet these deadlines importance to a secure application design is overlooked, which may lead to vulnerabilities. Moreover, the functional requirements keep changing based on your business needs, which may introduce additional security flaws.
To deal with this situation, you need Threat Modelling built into your design an exercise carried out from an attacker's perspective to discover, enumerate, and prioritize potential threats (security flaws). The purpose of this exercise is to provide your developers with a systematic analysis of the probable attack profiles the most likely attack vectors, and the assets most desired by an attacker.
