Fundamentals of Secure Software - Microsoft Threat Model Tool demo

This video tutorial introduces the Microsoft Threat Modeling Tool, focusing on getting started with the SDL template. It covers creating a threat model, defining boundaries, and configuring element properties to identify threats. The tutorial also explains how to analyze and review threats using the STRIDE methodology and generate reports for further analysis.

What is one of the new features added to the Microsoft Threat Modeling Tool?

• Voice command support

• Predefined templates

• Automated threat resolution

• Real-time collaboration

Which stencil is NOT typically used in a simple web application threat model?

• User interface

• Data flow

• Data store

• Processes

What is the purpose of defining trust boundaries in a threat model?

• To increase data flow speed

• To separate different security zones

• To enhance visual appeal

• To reduce the number of stencils

Why is it important to configure element properties in the threat model?

• To increase the size of the model

• To improve threat identification

• To reduce the number of threats

• To change the color of the stencils

What does the Microsoft Threat Modeling Tool use to categorize threats?

• NIST

• STRIDE

• DREAD

• OWASP

What can you do if a threat is marked as high priority but you disagree?

• Change it to medium priority

• Ignore it

• Add more stencils

• Delete the threat

In what format can you generate a report from the threat model?

• TXT

• CSV

• PDF

• DOCX