Tag: threat modeling

Finite State, SRA partner to drive enhanced cybersecurity for connected devices

Finite State, SRA partner to drive enhanced cybersecurity for connected devices

Software supply chain security firm Finite State and Security Risk Advisors (SRA), a vendor of cybersecurity engineering, testing, operations, and strategy, announced a partnership aimed at delivering advanced security solutions for automotive, medical, government, and industrial markets. The collaboration will…

New MITRE EMB3D collaborative framework provides common understanding to mitigate cyber threats

New MITRE EMB3D collaborative framework provides common understanding to mitigate cyber threats

Not-for-profit organization MITRE announced on Wednesday its alignment with Niyo Little Thunder Pearson (ONEGas Inc.), Red Balloon Security, and Narf Industries to introduce EMB3D. This collaborative initiative aims to address the growing cyber threats faced by critical infrastructure-embedded devices. As…

Threat Modeling for Critical Infrastructure

Threat Modeling for Critical Infrastructure

Threat modeling is a critical component of a Secure by Design strategy. It’s where we identify the product or system we are working on and identify threats and weaknesses we want to mitigate to avoid undesirable consequences. We should be…

Unraveling Security Engineering -Product vs. Systems in Critical Infrastructure

Unraveling Security Engineering -Product vs. Systems in Critical Infrastructure

Article Co-authored by Andrew Ohrt, Resilience Practice Area Lead for West Yost Associates We’ve seen a lot of discussion lately on the topic of “Secure by Design” as well as Security Engineering as an emerging (but not new) domain of…

threat modeling

MITRE releases playbook for threat modeling across medical device ecosystem

MITRE released guidance to the healthcare sector in the form of a playbook to increase knowledge of threat modeling throughout the medical device ecosystem. The organization said on Tuesday that it seeks to use the playbook to strengthen the cybersecurity…