CHAPTer 8 Identifying and Analyzing Threats, Vulnerabilities, and Exploits R ISKS OCCURwhenthreatsareabletoexploitvulnerabilities.Withthis inmind,itbecomesveryimportanttobeabletoidentifyandanalyze threats,vulnerabilities,andexploits.Youcandosowiththreatassessments, vulnerabilityassessments,andexploitassessments. Athreatassessmentattemptstoidentifyasmanythreatsaspossible.Itcannot identifyallpossiblethreats.Instead,itattemptstoidentifyasmanylikelythreats aspossible.Youcanidentifythreatsbyreviewinghistoricaldataandusing differentthreatmodelingtechniques. Avulnerabilityassessmentcanhelpyouidentifyweaknessesinyournetwork.