SecurityRatty: Threat modeling and root cause correction

This is cache of http://networking.ittoolbox.com/r/rss.asp?url=http://blogs.ittoolbox.com/security/adventures/archives/threat-modeling-and-root-cause-correction-23337. Cache is the snapshot of article that we took when we index feed.
To see original page click here.
We are not affiliated with the authors of this article and not responsible for its content.

Threat modeling and root cause correction

2008-03-26 10:46:41 by Editor in Adventures in Security

Threat modeling is a good way to understand how an attacker can potentially reach his intended target. Using attack trees, analysts identify paths to the target and efficient ways to block an attacker's progress. The best block is to eliminate root cause. Microsoft apparently missed this piece.