Applied Digital Threat Modeling: It Works
Rock Stevens, Daniel Votipka, Elissa M. Redmiles, Colin Ahern, Michelle L. Mazurek · IEEE Security & Privacy · 2019
Threat modeling, a structured process for identifying risks and developing mitigation strategies, has never been systematically evaluated in a real environment. Our case study at the New York City Cyber Command-the primary digital defense organization for the most populous city in the United States-found tangible benefits.