HEAVENS

The HEAVENS training course ​is designed to help students understand the HEAVENS security model. Safety and Security are two seemingly contradictory system features, which have challenged researchers for decades. Traditionally, these two features have been treated separately, but due to the increasing knowledge about their mutual impacts, similarities, and interdisciplinary values, they have become more important. The HEAling Vulnerabilities to ENhance Software Security and Safety (HEAVENS) security model analyzes threats based on Microsoft’s STRIDE approach and ranks the threats based on a risk assessment. 

The course begins with a discussion of the HEAVENS model and then compares the model to other models such as SAHARA. Next, the course covers threat analysis using STRIDE. The course concludes with a discussion on how to transition threat modeling output to the HEAVENS format and concludes with several case studies and exercises.