My blog has moved and can now be found at http://blog.aniljohn.com

No action is needed on your part if you are already subscribed to this blog via e-mail or its syndication feed.

Monday, February 2, 2004
« Java vs. .NET security - Part 3 | Main | IIS 5.0 Security Guidelines »

Looks that there is a new downloadable resource [1] on Threat Modeling available on Microsoft Downloads. "In this session, see how to design and build more secure systems by evaluating threats and selecting technologies to counter those threats."

Another great resource that goes into Threat Modeling is Michael Howard's "Writing Security 2". The second session on the Web Track of the DevDays presentations is on the topic of Threat Modeling as well.

[1] http://www.microsoft.com/downloads/details.aspx?familyid=ebd24aad-a39a-4978-81e0-99fbfb72a7bd&displaylang=en

[Now Playing: Raat Kali Ek Khwab - Dil Vil Pyar Vyar]

Tags:: Security
2/2/2004 12:09 AM Eastern Standard Time  |  Comments [1]  |  Disclaimer  |  Permalink   
Sunday, May 8, 2005 12:06:53 AM (Eastern Daylight Time, UTC-04:00)
I invite you to visit www.ptatechnologies.com and download a free trial version of PTA tool. PTA (Practical Threat Analysis) is a calculative threat modeling methodology and CASE tool that assists software security analysts and software developers in maintaining dynamic database of threat models and assessing system risks.
<br>
<br>PTA calculates threats and countermeasures priorities and produces the most effective risk reduction policy which reflects changes in system assets and vulnerabilities. Countermeasures’ priorities are expressed as a function of the system’s assets values, degrees of damage, threats probabilities and degrees of mitigation provided by countermeasures to the threats.
<br>
<br>We have a free program for students and independent software developers.
<br>
<br>Shai Levanon
<br>
<br>E-mail: shailv@ptatechnologies.com
<br>Web: www.ptatechnologies.com
<br>
Shai Levanon
Comments are closed.