“Because data flow diagrams were developed by system engineers rather than security pros, they include a lot of overhead that isn’t necessary for threat modeling.
One alternative to a data flow diagram is a process flow diagram. These are similar in overall concept but more streamlined and focused on ways users and executing code move through a system, more closely mirroring the way attackers think. ThreatModeler has a good primer on building a process flow diagram.”
CNBC Nightly Business Report NRB - ThreatModeler: Key to your identity
Archie Agarwal, CEO and Chief Technical Architect of ThreatModeler gives his opinion on security of personal information. He has leveraged his more than ten years of real-world experience in threat modeling and threat assessment to help numerous Fortune 1000 companies in setting up their threat modeling…