Episode
Threat Modeling: Protecting Our Nation's Complex Software-Intensive Systems
- Published
- Sep 5, 2025
- Duration seconds
- 2102
- Processing state
not_requested
Actions
POST https://stenobird.com/v1/public/podcasts/software-engineering-institute-sei-podcast-series-389154/episodes/threat-modeling-protecting-our-nation-s-complex-software-intensive-systems/transcription-requests
Idempotently request low-priority transcript generation for this episode.GET https://stenobird.com/podcast/software-engineering-institute-sei-podcast-series-389154/threat-modeling-protecting-our-nation-s-complex-software-intensive-systems.md
Read the agent-friendly Markdown representation of this episode resource.
Summary
In response to Executive Order (EO) 14028, Improving the Nation's Cybersecurity , the National Institute of Standards and Technology (NIST) recommended 11 practices for software verification . Threat modeling is at the top of the list. In this podcast from the Carnegie Mellon University Software Engineering Institute (SEI), Natasha Shevchenko and Alex Vesey, both engineers with the SEI's CERT Division, sit down with Timothy Chick, technical manager of CERT's Applied Systems Group, to discuss how threat modeling can be used to protect software-intensive systems from attack. Specifically, they explore how threat models can guide system requirements, system design, and operational choices to identify and mitigate threats.