Threat Modeling: Protecting Our Nation's Complex Software-Intensive Systems

In response to Executive Order (EO) 14028, Improving the Nation's Cybersecurity , the National Institute of Standards and Technology (NIST) recommended 11 practices for software verification . Threat modeling is at the top of the list. In this podcast from the Carnegie Mellon University Software Engineering Institute (SEI), Natasha Shevchenko and Alex Vesey, both engineers with the SEI's CERT Division, sit down with Timothy Chick, technical manager of CERT's Applied Systems Group, to discuss how threat modeling can be used to protect software-intensive systems from attack. Specifically, they explore how threat models can guide system requirements, system design, and operational choices to identify and mitigate threats.

You can listen to Threat Modeling: Protecting Our Nation's Complex Software-Intensive Systems online on Radio and Podcast. Open the player on this page to stream the available audio.

Threat Modeling: Protecting Our Nation's Complex Software-Intensive Systems is an episode from Software Engineering Institute (SEI) Podcast Series by Carnegie Mellon University Software Engineering Institute.

This episode is 35:02 long.

This episode was published on Sep 5, 2025.

Yes. Use the heart button on the episode page to add it to your favorite episodes list.

Yes. This page shows related episodes from Software Engineering Institute (SEI) Podcast Series when more episodes are available from the podcast feed.