VCE Software Development U4O2: Threat modelling and evaluating security practices
Students learn to define security requirements, identify and mitigate threats, confirm the mitigation worked, and evaluate an organisation's development practices against criteria using case-study evidence.
One content description from the full VCE Software Development - U4O2 - Cyber Security: secure software development practices journey. All 18 modules below are in that journey too, with the same content — add just these to a class, or the whole strand.
Modules (18)
1
What threat modelling is
2
Defining security requirements
3
Writing measurable non-functional requirements
4
Data flow diagram of a system
5
Trust boundaries
6
STRIDE threat categories
7
Attack trees
8
Risk rating matrix
9
Writing a threat model table
10
Security controls: prevent, detect, respond
11
Identifying and mitigating threats
12
Confirming threats have been mitigated
13
Ethical hacking
14
Reviewing and updating a threat model
15
Criteria for evaluating the security of software development practices
16
Rating a practice against a criterion with evidence
17
Analysing an organisation's software development practices
18
Identifying vulnerabilities and risks from a case study
For Teachers
Add this journey to your class and track every student in real time.
Create a free teacher account →No credit card. No setup fee. Make a class and invite students in under three minutes.
For Students
Start this journey on Cloodit — track progress, earn badges, and play live sprints with your class.
Start Learning Free →