[Autogenerated] I just want to remind you off this diagram,
which we saw in a previous module.
There are many different stages or steps In a day of UPS development life cycle.
We extended Dave Upside cycle by adding some security stages along the way.
This helps us to create the dev sec, Observe circle by way of reminder.
During the planning phase,
we're going to look a threat modelling on coding standards.
After that, we're going to look at static code analysis.
I'll explain the difference between S E A and so fast,
And then we're going to look at the third phase build and how
vulnerability scans can be important in this phase.
Let's move on and look, attract modeling we kept.
He did define strep modeling as a process by which potential threats such as
structural vulnerabilities can be identified in numerator on prioritized old
from a hypothetical Attackers point of view.
So what we're trying to achieve during the trip modeling
vase is to foresee weaknesses in the application that an
attacker might be able to exploit.
We're trying to get inside the mind of the attacker and builder system to
be more riposte to defend against these weaknesses.
There are many different trip modelling methodologies.
One of the more common is known as Stride,
which is an acronym for spoofing, tampering,
repudiation, information disclosure or leakage,
denial of service and elevation off privilege.
Thes air old different threats that you should assess your
application to ensure its robust enough to defend against
them When attempting to trip model.
It's always better to use some specific tools that are
designed specifically for the process.
It's quite difficult to do manually.
Implementing tooling can really help you identify the treads quickly.
One.
Freely available tools, which is still being maintained.
Is the Microsoft trip modeling, too?
I've provided a link for you to download this to,
depending on the type of solution you're building.
The Microsoft trip modeling to will propose a number of different threats
that you can assess your application under to determine whether it's
robust enough to defend against these trends.
In another one of my courses in the floors,
like library getting started with data loss prevention,
I dig deep into the Microsoft track modeling to I show you
how to download the tool and even worked through a case study
where I prepare a truck model.
Please go ahead and check out this course and specifically
the truck modeling section to get more in depth information
on how to prepare track model.