The threat modeling process is used to minimize the things in the network
environment that can cross the threat surface. In other words, to avoid the exposed
vulnerability of becoming an actual threat.
Willis, M. (2019). (ISC)2 SSCP Systems Security Practitioner Official Study Guide.
Wiley.
Identify security objectives.
For a residential approach, the security objectives would be to remove or update
unsupported operating systems from the network and teach the family the
importance of security.
Identify assets and external dependencies.
In this step, it is important to identify anything that can put the home network at risk.
An example of this is making sure that all the devices are updated. Since a home
network is not as critical as a business one, the recommendation would be for
automatic updates This will ensure that Internet of Things devices like Google .!
Home, Wireless Camera, Smart Vacuum Cleaners are always updated. If these
