Seven Steps of PASTA

Process for Attack Simulation and Threat Analysis (PASTA) is a methods to threat modeling. It is risk centric approach and aims at developing countermeasure in relation to value of assets to be protected. It models threat in seven stages.

Stage I: Definition of the Objectives (DO) for the Analysis of Risks
Stage II: Definition of the Technical Scope (DTS)
Stage III: Application Decomposition and Analysis (ADA)
Stage IV: Threat Analysis (TA)
Stage V: Weakness and Vulnerability Analysis (WVA)
Stage VI: Attack Modeling & Simulation (AMS)
Stage VII: Risk Analysis & Management (RAM)




For more information do read the book Risk Centric Threat Modeling: Process for Attack Simulation and Threat Analysis, first edition, by Tony UcedaVelez and Marco M. Morana.