ThreatModeler
ThreatModeler Software, Inc. is an American cybersecurity technology company based in Jersey City, New Jersey. It provides software as a service and products to automate threat modeling, identifying and communicating potential threats, such as structural vulnerabilities or the absence of appropriate safeguards.[1]
History
Company
ThreatModeler was founded by CEO Archie Agarwal, who had previously served as Director of Education at Whitehat Security, now a subsidiary of Japanese telecommunications conglomerate NTT.[2] Agarwal has frequently commented on major cybersecurity issues, participating in interviews with The Guardian and ZDNet around a major Twitch hack revealing popular streamers' revenues.[3][4]
ThreatModeler was originally developed as a proof of concept product in 2010, and launched as a commercial product in 2013.[5] ThreatModeler has developed 16 patents around threat modeling automation.[6]
ThreatModeler is a member organization of the Cybersecurity Tech Accord, an initiative fostering collaboration among global technology companies committed to protecting customers and users from malicious threats.[7][8] Partner organizations of ThreatModeler include AWS, Wipro, and Optiv.[9]
Product History
VAST
The Visual, Agile and Simple Threat (VAST) methodology was developed by ThreatModeler. VAST requires creating two types of models: application threat models and operational threat models. Application threat models use process-flow diagrams, representing the architectural point of view. Operational threat models are created from an attacker point of view based on DFDs. This approach allows for the integration of VAST into the organization's development and DevOps lifecycles.[10] ThreatModeler's methodology has been referenced in surveys and assessments developed by the MITRE Corporation for the Department of Homeland Security.[11]
Software-as-a-Service
In 2021, ThreatModeler launched the latest iterations to their technology: IaC-Assist and CloudModeler.[12] IaC-Assist enables developers to review their Infrastructure-as-Code in real time, while CloudModeler assists organizations in securing their cloud deployments by identifying design flaws or vulnerabilities while planning cloud migrations.[13]
References
- ↑ AgarwalFounder, Archie; CEO; ThreatModelerJanuary 25; 2022 (2022-01-25). "How Does Threat Modeling Work in Software Development?". Dark Reading. Retrieved 2022-02-16.
- ↑ "Archie Agarwal". Forbes Councils. Retrieved 2022-02-16.
- ↑ Greig, Jonathan. "Twitch source code, business data, gamer payouts leaked in massive hack". ZDNet. Retrieved 2022-02-16.
- ↑ "Twitch hack: data breach exposes sensitive information". the Guardian. 2021-10-06. Retrieved 2022-02-16.
- ↑ "Archie Agarwal". Forbes Councils. Retrieved 2022-02-16.
- ↑ "Patents Assigned to ThreatModeler Software Inc. - Justia Patents Search". patents.justia.com. Retrieved 2022-02-16.
- ↑ Inc, ThreatModeler Software (2019-01-14). "ThreatModeler joins Cyber Security Tech Accord". GlobeNewswire News Room. Retrieved 2022-02-16.
- ↑ "About the Cybersecurity Tech Accord". Cybersecurity Tech Accord. Retrieved 2022-02-16.
- ↑ "Our Partners". ThreatModeler Software, Inc. Retrieved 2022-02-16.
- ↑ "Threat Modeling: 12 Available Methods". SEI Blog. Retrieved 2022-02-16.
- ↑ Bodeau, Deborah J.; McCollum, Catherine D.; Fox, David B. (2018-11-06). "Cyber Threat Modeling: Survey, Assessment, and Representative Framework".
- ↑ Review, C. I. O. "ThreatModeler Drops IaC-Assist and CloudModeler Making DevSecOps More Accessible to Businesses". CIOReview. Retrieved 2022-02-16.
- ↑ "ThreatModeler Launches IaC-Assist and CloudModeler to Reduce Threat Drift from Code to Cloud". News Direct. Retrieved 2022-02-16.
This article "ThreatModeler" is from Wikipedia. The list of its authors can be seen in its historical and/or the page Edithistory:ThreatModeler. Articles copied from Draft Namespace on Wikipedia could be seen on the Draft Namespace of Wikipedia and not main one.
