# Threat Modeling: Protecting Our Nation's Complex Software-Intensive Systems Page: https://stenobird.com/podcast/software-engineering-institute-sei-podcast-series-389154/threat-modeling-protecting-our-nation-s-complex-software-intensive-systems Text version: https://stenobird.com/podcast/software-engineering-institute-sei-podcast-series-389154/threat-modeling-protecting-our-nation-s-complex-software-intensive-systems.md Podcast: [Software Engineering Institute (SEI) Podcast Series](https://stenobird.com/podcast/software-engineering-institute-sei-podcast-series-389154) Published: 2025-09-05T20:08:00+00:00 Episode link: https://cmu-sei-podcasts.libsyn.com/threat-modeling-protecting-our-nations-complex-software-intensive-systems Audio file: https://traffic.libsyn.com/clean/secure/cmu-sei-podcasts/threatmodeling_shevchenko_vesey_chick.mp3?dest-id=762491 Processing state: not_requested JSON: https://stenobird.com/v1/public/podcasts/software-engineering-institute-sei-podcast-series-389154/episodes/threat-modeling-protecting-our-nation-s-complex-software-intensive-systems Duration seconds: 2102 ## Resource In response to Executive Order (EO) 14028, Improving the Nation's Cybersecurity , the National Institute of Standards and Technology (NIST) recommended 11 practices for software verification . Threat modeling is at the top of the list. In this podcast from the Carnegie Mellon University Software Engineering Institute (SEI), Natasha Shevchenko and Alex Vesey, both engineers with the SEI's CERT Division, sit down with Timothy Chick, technical manager of CERT's Applied Systems Group, to discuss how threat modeling can be used to protect software-intensive systems from attack. Specifically, they explore how threat models can guide system requirements, system design, and operational choices to identify and mitigate threats. ## Actions - request_transcript: `POST https://stenobird.com/v1/public/podcasts/software-engineering-institute-sei-podcast-series-389154/episodes/threat-modeling-protecting-our-nation-s-complex-software-intensive-systems/transcription-requests` — Idempotently request low-priority transcript generation for this episode. - read_markdown: `GET https://stenobird.com/podcast/software-engineering-institute-sei-podcast-series-389154/threat-modeling-protecting-our-nation-s-complex-software-intensive-systems.md` — Read the agent-friendly Markdown representation of this episode resource. A page view does not enqueue transcription. Agents should invoke `request_transcript` explicitly when they need this episode processed. ## Transcript Full transcripts are not published on public pages unless there is a clear rights basis.