SDL Threat Modeling & Risk Assessment

Question 1

What is the main purpose of threat modeling in software development?

Accepted Answer

To identify security threats and mitigate risks

Answer

The main purpose of threat modeling in software development is to systematically analyze an application or system to identify potential security threats, vulnerabilities, and attack vectors. By understanding these risks, development teams can then design and implement appropriate security controls and mitigations. This proactive approach helps build security into the design from the outset, rather than trying to patch it later.

Question 2

Which technique is commonly used for systematic threat modeling?

Accepted Answer

STRIDE

Answer

STRIDE is a widely recognized and systematic methodology for threat modeling, developed by Microsoft. It categorizes threats into six types: Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege. Using STRIDE helps teams methodically identify and classify potential threats against different components of a system, guiding the selection of appropriate countermeasures.

Question 3

What does the 'D' in STRIDE stand for?

Accepted Answer

Denial of Service

Answer

In the STRIDE threat modeling methodology, 'D' stands for Denial of Service. This category of threats aims to make a system or resource unavailable to its legitimate users, often by overwhelming it with traffic or exploiting vulnerabilities. Identifying potential Denial of Service attacks during threat modeling allows developers to design systems that are resilient to such attacks, ensuring continuous availability.

Question 4

Why is risk assessment important after threat modeling?

Accepted Answer

To prioritize and manage risks effectively

Answer

After identifying potential threats through threat modeling, risk assessment is crucial to evaluate the likelihood and impact of each identified risk. This process allows teams to prioritize risks based on their severity and potential consequences. Effective risk assessment enables informed decision-making on which risks require immediate mitigation, which can be accepted, or which need further monitoring.

Question 5

What is an attack surface in threat modeling?

Accepted Answer

All points vulnerable to attack

Answer

In threat modeling, the attack surface refers to the sum of all points or vectors where an unauthorized user can try to enter or extract data from an environment. This includes all exposed interfaces, protocols, services, and code paths that could be exploited by an attacker. Identifying and minimizing the attack surface is a key strategy for reducing security risks.

(SDL) Security Development Lifecycle Certification Practice Test

(SDL) Security Development Lifecycle Certification Practice Test

SDL Threat Modeling & Risk Assessment