CISSP Crash Course - Threat Modeling

The video tutorial covers threat modeling, a process to identify and predict potential threats to systems or architectures. It explains the differences between pre-deployment and post-deployment threat modeling, and discusses various methods for identifying threats, including asset-oriented, attacker view, and software threats. The tutorial introduces threat modeling techniques like STRIDE and PASTA, and explains how to diagram threat models and use tools for threat identification. Finally, it covers prioritizing threats using systems like DREAD and implementing appropriate controls to mitigate them.

What new insight or understanding did you gain from this video?