https://www.vaptlabs.com/assets/ThreatModeling-r5aWSg_n.js

1import{r as o,j as e,S as c}from"./index-C1oq27HL.js";import{C as d,H as m,F as h,S as g,c as p,L as u,d as y,e as b}from"./Footer-l5ghn2Qo.js";import{A as x,m as f,S as v,C as w}from"./ServiceSection-BHCEAgl3.js";import{P as j}from"./ProcessCarousel-CUQk0pFn.js";import{C as k}from"./ClientCarousel-0xN_MtlU.js";import{B as T}from"./BenefitsSection-sm3DRbwY.js";import{S}from"./star-Ck-LDozm.js";import"./chevron-right-BX0bRqro.js";const N=[{q:"What is the threat modeling process?",a:"The threat modeling process is the structured process of pinpointing and transmitting information about the risks that may compromise any device, application, network, or other IT infrastructure."},{q:"What are the 4 stages of threat modeling?",a:"Threat modeling helps organizations protect their IT infrastructure against threat agents' con intentions. Threat modeling often comprises four stages, such as:<br><br>• Identify Assets<br>• Pinpoint Security Risks<br>• Threat Analysis<br>• Create Remediation Policies and Implementation of safeguards"},{q:"What is threat modeling in SDLC?",a:"Threat modeling within SDLC develops cyber attack resilience. Threat modeling during SDLC helps identify the attack vectors that can be utilized against the implemented safeguards, which enables proactively developing countermeasures to secure them."},{q:"What are the benefits of threat modeling?",a:"Threat modeling provides several key benefits:<br><br>• Early identification of security risks in the design phase<br>• Cost-effective security by addressing issues before implementation<br>• Improved security architecture and design decisions<br>• Better understanding of attack surfaces and potential threats<br>• Enhanced communication between security and development teams<br>• Compliance with security frameworks and regulations"},{q:"What methodologies are used in threat modeling?",a:"Common threat modeling methodologies include:<br><br>• <strong>STRIDE:</strong> Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege<br>• <strong>PASTA:</strong> Process for Attack Simulation and Threat Analysis<br>• <strong>OCTAVE:</strong> Operationally Critical Threat, Asset, and Vulnerability Evaluation<br>• <strong>TRIKE:</strong> Risk-based approach focusing on satisfying security auditing requirements<br>• <strong>VAST:</strong> Visual, Agile, and Simple Threat modeling"},{q:"When should threat modeling be performed?",a:"Threat modeling should be performed at multiple stages:<br><br>• During the design phase of new applications or systems<br>• When making significant architectural changes<br>• Before deploying applications to production<br>• During security reviews and assessments<br>• When integrating with third-party systems<br>• As part of regular security maintenance cycles"},{q:"What tools are used for threat modeling?",a:"Various tools support threat modeling activities:<br><br>• <strong>Microsoft Threat Modeling Tool:</strong> Free tool for creating threat models<br>• <strong>OWASP Threat Dragon:</strong> Open-source threat modeling tool<br>• <strong>IriusRisk:</strong> Automated threat modeling platform<br>• <strong>ThreatModeler:</strong> Collaborative threat modeling solution<br>• <strong>SecuriCAD:</strong> Automated threat modeling and attack simulations<br>• Manual approaches using diagrams and documentation"},{q:"How long does a threat modeling exercise take?",a:"The duration of threat modeling depends on system complexity:<br><br>• Simple applications: 1-2 days<br>• Medium complexity systems: 3-5 days<br>• Large enterprise applications: 1-2 weeks<br>• Complex distributed systems: 2-4 weeks<br><br>Factors affecting timeline include system architecture complexity, number of components, integration points, and stakeholder availability."}],C=()=>{const[i,r]=o.useState(null),a=t=>{r(i===t?null:t)};return e.jsx("section",{className:"py-20 bg-[#f3fcf7]",children:e.jsxs("div",{className:"max-w-4xl mx-auto px-4 sm:px-6 lg:px-8",children:[e.jsx("h2",{className:"text-3xl lg:text-4xl font-bold text-center text-gray-900 mb-12",children:"Threat Modeling FAQ"}),e.jsx("div",{className:"space-y-4",children:N.map((t,s)=>e.jsxs("div",{className:"border border-gray-200 rounded-lg bg-white",children:[e.jsxs("button",{className:"w-full flex justify-between items-center text-left px-6 py-4 text-gray-900 font-medium",onClick:()=>a(s),children:[e.jsx("span",{children:t.q}),e.jsx(d,{className:`w-5 h-5 text-gray-500 transform transition-transform duration-300 ${i===s?"rotate-180":""}`})]}),e.jsx(x,{initial:!1,children:i===s&&e.jsx(f.div,{initial:{height:0,opacity:0}

1,animate:{height:"auto",opacity:1},exit:{height:0,opacity:0},transition:{duration:.3,ease:"easeInOut"},className:"overflow-hidden",children:e.jsx("div",{className:"px-6 pb-4 text-gray-600 prose prose-sm",dangerouslySetInnerHTML:{__html:t.a}})},"content")})]},s))})]})})},n="linear-gradient(to right, rgb(217, 47, 97), rgb(143, 15, 56))",P=()=>{const[i,r]=o.useState(!1),[a,t]=o.useState("black"),s=[{icon:e.jsx(g,{className:"w-12 h-12 text-gray-800"}),title:"Proactive Security",description:"Identify potential threats and vulnerabilities before they can be exploited by attackers."},{icon:e.jsx(p,{className:"w-12 h-12 text-gray-800"}),title:"Risk Assessment",description:"Comprehensive analysis of security risks and their potential impact on business operations."},{icon:e.jsx(u,{className:"w-12 h-12 text-gray-800"}),title:"Security Architecture",description:"Design secure system architectures based on identified threats and attack vectors."},{icon:e.jsx(S,{className:"w-12 h-12 text-gray-800"}),title:"Compliance Support",description:"Support regulatory compliance through systematic threat identification and mitigation."},{icon:e.jsx(y,{className:"w-12 h-12 text-gray-800"}),title:"Secure Development",description:"Integrate security considerations into the software development lifecycle from the start."},{icon:e.jsx(b,{className:"w-12 h-12 text-gray-800"}),title:"Attack Surface Analysis",description:"Comprehensive mapping of potential attack surfaces and entry points."}],l={black:"Black Box Threat Modeling analyzes systems from an external attacker's perspective without internal knowledge. This approach helps identify threats that external actors might exploit, focusing on publicly accessible interfaces, exposed services, and potential attack vectors visible from outside the organization.",gray:"Gray Box Threat Modeling combines limited internal knowledge with external threat analysis. This hybrid approach allows evaluation of both external and internal threat vectors while maintaining realistic attack scenarios, ensuring comprehensive coverage of potential security risks.",white:"White Box Threat Modeling provides complete access to system architecture, source code, and internal documentation. This comprehensive approach ensures thorough analysis of all potential threats, including internal vulnerabilities, architectural weaknesses, and implementation flaws that may not be visible externally."};return e.jsxs("div",{className:"min-h-screen bg-white",children:[e.jsx(c,{title:"Threat Modeling Services",description:"Structured threat modeling (STRIDE/DREAD) to identify design-level security risks before you build — integrated into your SDLC.",path:"/services/threat-modeling",keywords:"threat modeling services, threat modeling",serviceSchema:{name:"Threat Modeling",description:"Structured threat modeling integrated into the software development lifecycle."}}),e.jsx(m,{}),e.jsx(v,{title:"Threat Modeling",subtitle:"Systematic identification and analysis of potential security threats to build more secure systems.",image:"https://images.unsplash.com/photo-1550751827-4bd374c3f58b?ixlib=rb-4.0.3&auto=format&fit=crop&w=1000&q=80",onContactClick:()=>r(!0)}),e.jsx("div",{className:"py-16 bg-gray-50",children:e.jsxs("div",{className:"max-w-7xl mx-auto px-4 sm:px-6 lg:px-8",children:[e.jsx("div",{className:"text-center mb-12",children:e.jsx("h2",{className:"text-3xl font-bold text-gray-900 mb-4",children:e.jsx("span",{className:"pb-2 inline-block",style:{borderBottom:"4px solid",borderImage:`${n} 1`},children:"Overview : Threat Modeling"})})}),e.jsx("div",{className:"max-w-4xl mx-auto text-center",children:e.jsx("p",{className:"text-lg text-gray-700 leading-relaxed",children:"Threat modeling is a systematic approach to identifying, analyzing, and mitigating potential security threats in systems, applications, and infrastructure. This process involves understanding system architecture, identifying assets, analyzing potential attack vectors, and developing appropriate security controls. Our comprehensive threat modeling methodology helps organizations build security into their systems from the design phase and maintain robust defenses against evolving cyber threats."})})]})}),e.jsx("div",{className:"py-16 bg-white",children:e.jsx("div",{className:"max-w-7xl mx-auto px-4 sm:px-6 lg:px-8",children:e.jsxs("div",{className:"grid lg:grid-cols-2 gap-12 items-center",children:[e.jsxs("div",{children:[e.jsx("h2",{className:"text-3xl font-bold text-gray-900 mb-8",children:"Threat Modeling Methodology"}),e.jsx("p",{className:"text-gray-700 mb-8 leading-relaxed",children:"VAPTlabs employs a comprehensive methodology for threat modeling that systematically identifies and analyzes potential security threats. Our approach includes thorough analysis based on industry frameworks like STRIDE, PASTA, OCTAVE, and NIST Risk Management Framework."}),e.jsxs("div",{className:"mb-8 flex gap-4 justify-center md:justify-start",children:[e.jsx("button",{className:`px-6 py-2 rounded-t-lg font-semibold ${a==="black"?"bg-gray-800 text-white":"bg-gray-200 text-gray-600 hover:bg-gray-300"}`,onClick:()=>t("black"),children:"Black Box"}),e.jsx("button",{className:`px-6 py-2 rounded-t-lg font-semibold ${a==="gray"?"bg-gray-400 text-white":"bg-gray-200 text-gray-600 hover:bg-gray-300"}`,onClick:()=>t("gray"),children:"Gray Box"}),e.jsx("button",{className:`px-6 py-2 rounded-t-lg font-semibold ${a==="white"?"":"bg-gray-200 text-gray-600 hover:bg-gray-300"}`,onClick:()=>t("white"),style:a==="white"?{background:n,color:"white"}:void 0,children:"White Box"})]}),e.jsx("div",{className:"bg-gray-50 p-6 rounded-lg shadow-md text-gray-700 leading-relaxed",style:{marginTop:"-24px"},children:l[a]}),e.jsx("div",{className:"text-center mt-8",children:e.jsx("button",{className:"bg-emerald-500 hover:bg-emerald-600 text-white px-8 py-3 rounded-lg font-semibold transition-colors",style:{background:n,color:"#fff"},onClick:()=>r(!0),children:"Get Free Consultation"})})]}),e.jsx("div",{className:"relative",children:e.jsx("div",{className:"bg-gradient-to-br from-emerald-100 to-emerald-200 rounded-lg p-8",style:{background:"linear-gradient(180deg, rgba(217,47,97,0.06), rgba(143,15,56,0.04))"},children:e.jsx("img",{src:"https://images.unsplash.com/photo-1551288049-bebda4e38f71?ixlib=rb-4.0.3&auto=format&fit=crop&w=1000&q=80",alt:"Threat Modeling",className:"rounded-lg shadow-lg"})})})]})})}

1),e.jsx(T,{benefits:s,title:"Benefits"}),e.jsx(j,{title:"Threat Modeling Process"}),e.jsx(k,{}),e.jsx(C,{}),e.jsx(h,{}),e.jsx(w,{isOpen:i,onClose:()=>r(!1)})]})};export{P as default};