1. All topics
  2. Technology
  3. Cybersecurity
  4. Software Development Security
Learning Threat Modeling for Security Professionals Preview

Learning Threat Modeling for Security Professionals

With Adam Shostack Liked by 1,814 users
Duration: 46m Skill level: Beginner + Intermediate Released: 1/2/2019

Start my 1-month free trial Buy for my team

Course details

In the 21st century, no one doubts the importance of cybersecurity. Threat modeling is where it starts. Threat modeling is a framework for thinking about what can go wrong, and the foundation for everything a security professional does. This training course provides an overview of the traditional four-question framework for (1) defining what you're working on, (2) discovering what can go wrong, (3) deciding what to do about it, and (4) ensuring you've done the right things in the right ways for the systems you're delivering. Instructor Adam Shostack also reviews the STRIDE model for identifying six types of threats: spoofing, tampering, repudiation, information disclosure, denial of service, and elevation of privilege. Using a simple case study—a billing system for a media server that serves ads—Adam shows how to apply the principles and find security and privacy problems so the developer can include appropriate configurations and controls as part of the operational design and rollout.

Skills you’ll gain

Earn a sharable certificate

Share what you’ve learned, and be a standout professional in your desired industry with a certificate showcasing your knowledge gained from the course.

Sample certificate

Certificate of Completion

  • Showcase on your LinkedIn profile under “Licenses and Certificate” section

  • Download or print out as PDF to share with others

  • Share as image online to demonstrate your skill

Meet the instructor

Learner reviews

4.7 out of 5

997 ratings
  • 5 star
    Current value: 738 74%
  • 4 star
    Current value: 196 20%
  • 3 star
    Current value: 46 5%
  • 2 star
    Current value: 8 <1%
  • 1 star
    Current value: 9 <1%
  • Shubham A. Shubham A.

    Shubham A.

    Full-stack Engineer and Cloud Architect | AppSec Meddler | Architecture, DevSecOps, Threat Modelling, Security for small startups with 10X value

    5/5 October 29, 2024
    Practical teachings around Threat modelling and very clear instructions. The concepts are delivered in an agnostic way.
    Helpful · Report
  • George Blackwood George Blackwood

    George Blackwood

    computer tech at Ingram Micro

    5/5 August 21, 2024
    very good and yes, I would recommend this course to others,
    Helpful · Report
  • Joshua C. Joshua C.

    Joshua C.

    Cybersecurity Analyst | PCI DSS SME | GRC | Driving Organizations Towards Achieving Cyber Resiliency

    5/5 August 19, 2024
    If you are wanting to learn threat modeling, I highly recommend this course. I don't know how this training would lend opportunities to practice these concepts, as threat modeling is a collaborative effort, and you would need to have tangible examples to work with. Adam Shostack does a great job of providing relevant examples, pointing out where others go wrong, and emphasizing that this practice must be consistent and align with how the organization manages other issues.
    Helpful · Report

Contents

What’s included

  • Test your knowledge 3 quizzes
  • Learn on the go Access on tablet and phone

Similar courses

Download courses

Use your iOS or Android LinkedIn Learning app, and watch courses on your mobile device without an internet connection.

Download on the App Store Get it on Google Play