Software security is based on the identification and mitigation of security risks. In Vaisala, each product owner is responsible for performing security risk analysis for their products and planning risk mitigation actions.
Security risk analysis is performed by using threat modeling such as the STRIDE method. The results of the threat modeling are documented in the project backlog and prioritized accordingly. The threat model covers the following characteristics where applicable:
- Data flow and stores
- Trust boundaries
- Processes
- Interactions with external entities
- Internal and external communication protocols
- Externally accessible physical ports including debug ports
- Circuit board connections, for example, JTAG (Joint Test Action Group) port
- Direct attacks on the hardware
- Potential threats and their severity
- Mitigation for each identified threat
- Security-related issues identified
- External dependencies, for example, third-party software and systems