Threat Modeling: Designing for Security

This book comes very well recommended. An essential read / reference for any IT professional who is serious about IT Systems / Services Security processes, modelling and threat management. One of the vey few books recommended by Bruce Schneier.

It help me to pass the CISSP & CRISC exam, very clear and a lot of referencing topics. Another good shopping.

A solid methodology that is easily practised.

This is a great resource on threat modelling. I shows how to threat model in a visual way that can be easily interpreted. It also has links to some playing cards to help indentift threats.

An excellent reference for anyone seeking to embed secure by design concepts into their business projects.

Very good book containing many important things, in an easy to read fashion.

One, if the THE best book on threat modelling I have read.

I'm working on a large programme where, and this isn't unusual across industry, the information security team haven't performed a risk assessment. So to fill in the gaps and to justify the controls-led approach I've had to take I've conducted a threat assessment. This book was really helpful in getting a first draft produced quickly enough to still be useful.