Applied Threat Driven Security Verification
Danny Dhillon, Vishal Mishra · 2018
This paper presents the results of software security verification as practiced by a large infrastructure software vendor. Threat modeling is performed by developers to formulate testable security requirements that are verified with automated scanners, developer-led verification of the threat model as well as centralized independent verification.