Study on Smart Security Measures in Threat and Risk Assessment

SEP, more specifically Security Engineering Process, forms a part of the modern assessment and evaluation of related threats and risks, whether it is an agile form of development or SSDLC (Secure Software Development Life Cycle). While in today’s era we deal with modern concepts like cloud computing, remote processing, etc. kinds of strategies which involve data at rest and data in motion, and data computation-intensive tasks. Threat and Risk Assessment are closely related to different attack values in which an attacker can perform actions in order to gain additional privileges to your system, software, cloud etc. Threat and Risk Assessment of different projects including web applications development, cloud onboarding, requires accessing the project at the design level so that the product is more specifically secure in the terms of compliance and the coding techniques used are in accordance with the secure coding guidelines. This paper focuses on the comparison of various standardized threat and risk assessment techniques with respect to dynamic threats and possible risk mitigations.