Practical Threat Analysis - a calculative Threat Modeling methodology and a Risk Assessment tool for Security Experts

<body bgcolor="white"> <h1 align="left"><font face="Verdana" size="1"> <a target="_top" href="http://www.ptatechnologies.com/">Home Page</a></font></h1> <h1 align="center"><font face="Verdana" size="1">PTA for the Enterprise </font> </h1> <h3 align="left"><span style="font-weight: 400"> <font size="1" color="#000000" face="Verdana"> PTA for the Enterprise is a complete server based solution that enables collaboration and information sharing between security analysts working on different projects. It allows centralized management of organizational security knowledge. Please contact </font></span><font face="Verdana" size="1"> <span style="font-weight: 400"> <a href="mailto:support@ptatechnologies.com?subject=PTA for Enterprise to Zeev:">Zeev Solomonik</a> </span> </font><span style="font-weight: 400"> <font size="1" color="#000000" face="Verdana">for further information on development and deployment of PTA enterprise projects.</font></span></h3> <h3 align="left"><span style="font-weight: 400"> <font size="1" color="#000000" face="Verdana"> Examine some of the features of a typical solution in the following feature list.</font></span></h3> <p align="left"><font face="Verdana" size="1">Read More: <a href="http://www.ptatechnologies.com/PTAenterprise.htm">http://www.ptatechnologies.com/PTAenterprise.htm</a></font></p> <h3 align="left"><font face="Verdana" size="1">Extended Support in Building Threat Models</font></h3> <ul> <li> <p align="left"><font face="Verdana" size="1"><b>Questionnaire based wizard</b> that assists analysts to quickly and easily build customized threat models. <br> </font></p> </li> <li> <p align="left"><font face="Verdana" size="1">Intelligent <b>validation tools</b> for checking the model's integrity and completeness. The validation tool will automatically point to weaknesses in the model and offer corrections and improvement hints.<br> </font></p> </li> <li> <p align="left"><font face="Verdana" size="1"><b>Graphic display</b> of threat model with ‘drag & drop’ editing tools.<br> </font></p> </li> <li> <p align="left"><font face="Verdana" size="1"><b>Automated updates</b> of domain-specific entity libraries and threat model templates.</font></p> </li> </ul> <p align="left"><font face="Verdana" size="1">Read More: <a href="http://www.ptatechnologies.com/PTAenterprise.htm">http://www.ptatechnologies.com/PTAenterprise.htm</a></font></p> <h3 align="left"><font face="Verdana" size="1">Central Security Projects Management</font></h3> <ul> <li> <p align="left"><font face="Verdana" size="1">Threat models are managed in a <b>central encrypted database</b> with sophisticated replicas synchronization enabling several analysts to work on the same threat model simultaneously.<br> </font></p> </li> <li> <p align="left"><font face="Verdana" size="1"><b>Secured access</b> of users to parts of threat models and libraries according to permissions and working roles.<br> </font></p> </li> <li> <p align="left"><font face="Verdana" size="1">Comprehensive <b>full text search</b> and advanced OLAP queries that cover all threat models scope. <br> </font></p> </li> <li> <p align="left"><font face="Verdana" size="1">Merging and splitting of threat models and libraries and <b>importing</b> of model’s entities from external databases and repositories.</font></p> </li> </ul> <p align="left"><font face="Verdana" size="1">Read More: <a href="http://www.ptatechnologies.com/PTAenterprise.htm">http://www.ptatechnologies.com/PTAenterprise.htm</a></font></p> <h3 align="left"><font face="Verdana" size="1">Team Collaboration</font></h3> <ul> <li> <p align="left"><font face="Verdana" size="1"><b>Version control</b> that provides 'check in' and 'check out' operations on model’s entities to protect it's completeness and consistency.<br> </font></p> </li> <li> <p align="left"><font face="Verdana" size="1">Unlimited <b>historical archive</b> of threat models versions that supports version branching.<br> </font></p> </li> <li> <p align="left"><font face="Verdana" size="1"><b>Audit</b> of analysts’ activities, teamwork assignments and enterprise-wide statistics.</font></p> </li> </ul> <h3 align="left"><font face="Verdana" size="1">Advanced Support for ISO 17799 - BS 7799 and ISO 27001</font></h3> <ul> <li> <p align="left"><font face="Verdana" size="1"><b>Extensive entity libraries</b> for ISO 17799 - BS 7799 and ISO 27001 enable users to easily develop complete approval-ready security compliance documents that meet government regulations and requirements.<br> </font></p> </li> <li> <p align="left"><font face="Verdana" size="1">Separate data entry screens for the <b>verification and validation</b> phases.<br> </font></p> </li> <li> <p align="left"><font face="Verdana" size="1">Specialized wizards for <b>filtering</b> of a master set of <b>regulations and requirements</b>, delivering a specific sub-set of relevant action items in minutes. </font></p> </li> </ul> <p align="left"><font face="Verdana" size="1">Read More: <a href="http://www.ptatechnologies.com/PTAenterprise.htm">http://www.ptatechnologies.com/PTAenterprise.htm</a></font></p> <p align="center"><font face="Verdana" size="1"> ***</font></p> <p align="center"> </p> <p align="center"><font face="Verdana" size="1"> <b> <a target="content" href="CaseStudies.htm">Practical Threat Analysis Case Studies</a></b><br> <a target="_top" href="http://www.ptatechnologies.com/">Home Page</a></font></p> </body>