Threat modeling training sessions by cyber security experts

5 years of experience

Currently active in 4 countries

5.000+ trainings given

10.000+ people trained

Downloads

Blog

Threat modeling is a methodology used in cyber security that consist of a technical risk assessment of the possible security flaws of a system and then delves deeper into the ways these flaws can be mitigated. Toreon offers Whiteboard Hacking training sessions based on this threat modeling methodology.

Gain more insight and create doomsday scenarios fo

The threat landscape is constantly evolving, and so is your organisation. Therefore, you need to understand the technical and business context, and create doomsday scenarios. As a result, you have a broader insight of the threats to your application.

Threat modeling: what is it, how does it work and

You might have heard of threat modeling as a structured activity for identifying and managing application threats. And that’s exactly what it is. Threat modeling – also called Architectural Risk Analysis – is an essential step in the development of your application. Without it, your protection is a shot in the dark.

Threat modeling in 4 steps

We convinced you of the use of threat modeling in a previous post. But where and how do you start? Threat modeling is performed through a series of workshops. Architects, developers and system administrators are guided through the threat modeling process. It is the primary security analysis task executed during the software design stage.

Toreon is a company that promotes threat modeling and created a threat modeling training called Whiteboard Hacking. A definition of threat modeling is ‘the structured activity for identifying and managing application threats in software development’. Since cyber security is still too often overlooked in business strategies most companies do not understand the possible threats they are facing. Toreon’s goal is to improve the security maturity level of your company, by organising (in-house) training sessions. We have developed a 2-day course with practical use cases, based on real world projects. Students are challenged in groups of 3 to 4 people to perform the different stages of threat modeling. Our trainings involve the use of the STRIDE threat model. We also deliver hands-on workshops for threat modeling practitioners to improve your skills.

We also deliver customized whiteboard hacking trainings:

Offensive Whiteboard Hacking for pen testers, where the focus is on threat modeling as part of security testing.
Hands-on Threat Modeling and tooling for DevSecOps, where we cover defensive threat modeling as part of a secure development life cycle and tooling.
Privacy by design and threat modeling for IT, integrating privacy by design and GDPR risk patterns with threat modeling as part of a secure development life cycle.
Threat modeling for ICS/OT using threat modeling in industrial, manufacturing, and operational technologies environments.
Threat modeling medical device systems, where we teach technical risk assessments for medical devices and complying with regulatory requirements from e.g. the FDA

Threat modeling training sessions by cyber security experts

Threat Modeling