Threat Modeling: A Process To Ensure Application Security

Application security has become a major concern in recent years. Hackers are using new techniques to gain access to sensitive data, disable applications and administer other malicious activities aimed at the software application.

The need to secure an application is imperative for use in today's world. Until recently, application security was an afterthought; developers were typically focused on functionality and features, waiting to implement security at the end of development. This approach to application security has proven to be disastrous; many vulnerabilities have gone undetected allowing applications to be attacked and damaged.

This raises the following questions: How can application security become an integral part of the development process? How can an application design team discover and avoid vulnerabilities in their application?