SEC-220 Threat Modeling & Attack Surfaces
STRIDE methodology, attack trees, and systematic security architecture review.
- Level
- Intermediate
- Planned time
- 14 hours
- Area
- Threat Modeling
- Take first
- SEC-101
You should be able to
- Apply STRIDE to identify threats in system architectures
- Create actionable threat models with mitigations
Modules
- STRIDE MethodologyReading · 90 min
- Attack Trees & Surface AnalysisExercise · 120 min
- Threat Model a Real SystemProject · 240 min
Module times add to 7 h 30 min. The planned time above includes practice and review.