thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Advanced

Visual, Agile and Simple Threat modeling (VAST)

A scalable threat modeling methodology that produces separate application and operational threat models for agile enterprises.

Definition

VAST, associated with the ThreatModeler tool, uses process-flow diagrams for application threat models and DFDs for operational (infrastructure) threat models. It aims to integrate threat modeling into agile workflows at enterprise scale.

Example

An enterprise produces application threat models for 200 microservices using VAST templates.

Exam tip

Recognize VAST as the agile, enterprise-scale methodology with two model types.

Related terms