Model Your Way to Better Cybersecurity

Software Engineering Institute at Carnegie Mellon University

In this webcast, Natasha Shevchenko and Alex Vesey discuss the increasingly important role that Model-Based Systems Engineering can play.

Threat modeling is intended to help defend a system from attack. It tops the list of techniques recommended by the National Institute of Standards and Technology (NIST) to secure critical systems. In a world where people with malicious intent have deadlier tools at their disposal, defenders need to take advantage of Model-Based Systems Engineering (MBSE) to form mitigation strategies effective from early in the systems engineering lifecycle. This webcast will preview a workshop to be held during the 2025 Secure Software by Design conference to be held on August 19 and 20.What Attendees Will Learn:<ul><li>How MBSE can aid cybersecurity analysis and design</li><li>The value of MBSE for cyber threat modeling</li><li>An overview of threat modeling techniques using MBSE</li></ul>Who Should Attend:<ul><li>Security practitioners</li><li>Systems/Software architects</li><li>Systems/Software engineers</li></ul> About the SpeakersNatasha Shevchenko is a senior member of the technical staff within the CERT Division of the Carnegie Mellon University Software Engineering Institute (CMU SEI). She specializes in systems engineering, enterprise architecture, model-based systems engineering (MBSE), and threat modeling methods. She has a breadth of experience across the software development lifecycle for more than 20 years. Prior to joining the CMU SEI, Shevchenko worked in the teleconferencing, railroads, and financial services critical infrastructures. She holds MS degrees in Software Engineering from CMU, and both BS and MS degrees in Mathematics from Donetsk State University in Ukraine.Alex Vesey is a Member of the Technical Staff in the CERT Division at the Carnegie Mellon University Software Engineering Institute (CMU SEI). His work focuses on the application of model-based systems engineering (MBSE), threat modeling methodologies, and best practices in application programming interface (API) design. Alex has eight years of experience as a software engineer in the defense contracting sector, where he has contributed to a wide range of efforts spanning early concept development through the enhancement of legacy systems. He holds dual Bachelor of Science degrees in Information Sciences and Technology, and in Security and Risk Analysis from The Pennsylvania State University, as well as a Master of Science in Systems Engineering from Worcester Polytechnic Institute.