Question1:To enhance the security of information systems, enterprises are developing and adopting information system management systems. However, if an information management system is exploited, appl

Question1:

To enhance the security of information systems, enterprises are developing and adopting information system management systems. However, if an information management system is exploited, applications and the data they contain will be compromised. Therefore, it is important to perform comprehensive threat modeling throughout the enterprise.

In your own words explain (a) what is threat modeling, and (b) why it is important for an enterprise to address threat modeling extensively. Please state your answer in a 1-2 page paper in APA format.  Include citations and sources in APA style.

Question2:

STRIDE is a popular threat modeling technique commonly used to discover the security weaknesses of a software system.

For this assignment (a) research and discuss the limitations associated with STRIDE, (b) Create your own attack tree using the example in Chapter 4 "Example Attack Tree" p95 as a reference point, (c) research and discuss the limitations associated with attack trees and attack libraries. Please state your answer in a 1- 4 page paper in APA format.  Include citations and sources in APA style.

Question3:

STRIDE is a model-based threat modeling technique developed by Microsoft. The methodology guides the security analyst through several activities that must be conducted in order for the process to be effective.

For this assignment explain in detail how you would start a threat modeling project. Please provide explanations for each step stated.  Please state your answer in a 1-2 page paper in APA format.  Include citations and sources in APA style.