An Approach for Integrating the Security Engineering Risk Analysis (SERA) Method with Threat Modeling
• SEI Report
Publisher
Software Engineering Institute
Topic or Tag
Abstract
In this report, the authors explore the link between the SERA Method and threat modeling, which has become a popular engineering practice across industry and government organizations in the past decade. A threat modeling method defines an approach for identifying countermeasures that can be engineered into a software system. In this report, Alberts and Woody specifically examine how the system-focused cybersecurity data generated by a threat modeling method can be integrated into a mission assurance context using the SERA Method.
Cite This SEI Report
Alberts, C., & Woody, D. (2019, February 6). An Approach for Integrating the Security Engineering Risk Analysis (SERA) Method with Threat Modeling. Retrieved October 24, 2026, from https://www.sei.cmu.edu/library/an-approach-for-integrating-the-security-engineering-risk-analysis-sera-method-with-threat-modeling/.
@techreport{alberts_2019,
author={Alberts, Christopher and Woody, Dr. Carol},
title={An Approach for Integrating the Security Engineering Risk Analysis (SERA) Method with Threat Modeling},
month={Feb},
year={2019},
institution={Software Engineering Institute, Carnegie Mellon University},
url={https://www.sei.cmu.edu/library/an-approach-for-integrating-the-security-engineering-risk-analysis-sera-method-with-threat-modeling/},
note={Accessed: 2026-Oct-24}
}
Alberts, Christopher, and Dr. Carol Woody. "An Approach for Integrating the Security Engineering Risk Analysis (SERA) Method with Threat Modeling." Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, February 6, 2019. https://www.sei.cmu.edu/library/an-approach-for-integrating-the-security-engineering-risk-analysis-sera-method-with-threat-modeling/.
C. Alberts, and D. Woody, "An Approach for Integrating the Security Engineering Risk Analysis (SERA) Method with Threat Modeling," Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, 6-Feb-2019 [Online]. Available: https://www.sei.cmu.edu/library/an-approach-for-integrating-the-security-engineering-risk-analysis-sera-method-with-threat-modeling/. [Accessed: 24-Oct-2026].
Alberts, Christopher, and Dr. Carol Woody. "An Approach for Integrating the Security Engineering Risk Analysis (SERA) Method with Threat Modeling." Software Engineering Institute, Carnegie Mellon University, Software Engineering Institute, 6 Feb. 2019. https://www.sei.cmu.edu/library/an-approach-for-integrating-the-security-engineering-risk-analysis-sera-method-with-threat-modeling/. Accessed 24 Oct. 2026.
Alberts, Christopher; & Woody, Dr. Carol. An Approach for Integrating the Security Engineering Risk Analysis (SERA) Method with Threat Modeling. Software Engineering Institute. 2019. https://www.sei.cmu.edu/library/an-approach-for-integrating-the-security-engineering-risk-analysis-sera-method-with-threat-modeling/