A Novel Perspective to Threat Modelling using Design Thinking and Agile Principles

Abstract

Security for every organization in the digital space is of primary focus and to better highlight and define the strategies to keep the systems safe and secure is of prime importance. While unauthorized access and unethical actions by intruders remain a cause of concern, ensuring the right measures through proper Threat Modelling techniques is necessary to create a barrier against them. The intention of getting access to a system or website or server can be born out of multiple threat groups and can be classified into common security threats. This paper looks at a persona-based approach to identify user groups that can be a threat to a system and how we can use the concepts of Design Thinking to model the system and protect it from possible security breaches. Considering the agile methodologies of software development, the paper talks about focusing on a perspective that discusses a design methodology by keeping the individuals and interactions for working models at the top of threat modelling measures.