Integrated Threat Modelling

The three main approaches for threat modelling are asset-centric, attacker-centric and software-centric. In this thesis we ask the question why one should only use just one of the three approaches, and not combine them. We then propose a method called integrated threat modelling which combines the three common threat modelling approaches. This project was done in collaboration with Telenor.