Unified Threat Modeling

Abstract

Today, in the digital world, the security of systems is crucial because, with continuous information exchange and huge quantities of data being processed, the protection of operation processes and data assets becomes paramount. Threat modeling is an important part of cybersecurity management methodology that looks for any possible threats or weaknesses that can break the system or endanger the environment. This paper is an attempt to analyze all the models of threat modeling by taking STRIDE, PASTA, DREAD, TREK, VAST and Attack Trees as references. An integrated model is suggested that combines the benefits of existing approaches, which includes the adoption of a comprehensive frame to deal with cyber threats. This methodology emphasizes iterative refinement and rigorous testing to ensure the effectiveness of threat mitigation strategies. By incorporating user-friendly web portals and the integration of new technologies, this framework enhances usability and addresses emerging threats.