Chapter 6: Cyber Threat Modeling and Adversary Analysis

To implement a sound defense system, it is essential to understand what needs protection and from who. With the increase in security breaches, organizations must measure and project the potential threats that can impact the system and develop proper mitigation plans. Such is the purpose of threat modeling. Threat modeling is used to better understand yourself, understand the adversary, and map the two to create a better defense (remediation plan and resource protection). When an organization initiates threat modeling, two main components need to be highlighted: organization resources and adversary knowledge.

This chapter focuses on strategically modeling threats and analyzing the adversary's behavior. This chapter aims to equip you with the methodologies necessary for proactive cyber threat analysis and defense. We will look at adversary modeling as it is a critical concept in identifying the behaviors and characteristics...