This
was a very interesting course. It was quite the challenge as well. From the
layman’s perspective, threat modeling sounds rather simple. However, this is
not the case at all. Throughout the
course, I was challenged with the process because of the concepts that must go
in at every step. Steps can easily get overlooked or seen differently than they
really are. I am a big picture person so at times I miss details that others
might see. Sometimes, it is challenging for me to get past my own big picture
views to see the actual trees in the forest but this is still something I am
working on.
I
really enjoy the system analysis process in threat modeling. It combines some
of the challenges of understanding a complex system to then combining this
understanding into the ideas and concepts of threats. One important understanding
to gain from threat modeling is how to best understand vulnerabilities and
threats in specific environments. There seems to be some variation from
organizations on what is considered a threat or vulnerability. My previous
employer seemed to be lacking in the information security area which was frustrating
at times because they didn’t value information security practices. This is why
I feel like this is a very important part of threat analysis. It was a nice
semester and I enjoyed the time I spent in this course! I really enjoyed
creating these blogs!
Yours truly,
Rashele Shoun
No comments:
Post a Comment