Threat Modeling in 600 seconds or less (ok, I lied, more like 2,400)

Presented at Diana Initiative 2022, Aug. 10, 2022, 5 p.m. (60 minutes).

Threat Modeling in only 10 minutes? I’m in!! Oh wait, it’s really 40 minutes? That’s cool, I can work that in. Yes, Threat Modeling is both FUN and EXCITING and can shave tons of time off SDLC - if done right. So let’s get down and dirty and see what it takes to do a good Threat Model!!

Presenters:

• Kat Fitzgerald - Google
  Based in Seattle and a natural creature of winter, you can typically find me sipping Grand Mayan Extra Anejo whilst simultaneously defending my systems using OSS, magic spells and Dancing Flamingos. Honeypots & Refrigerators are a few of my favorite things! Fun Fact: I rescue Feral Pop Tarts and have the only Pop Tart Sanctuary in the Pacific NW.

Links:

• https://thedianainitiative2022.sched.com/event/15cmD/threat-modeling-in-600-seconds-or-less-ok-i-lied-more-like-2400

Similar Presentations:

• SOURCE Seattle 2017 / Threat Modeling
• BSidesDC 2017 / Real World Threat Modeling (CLASS)
• DeepSec 2019 „Internet of Facts and Fears“ / Lost in (DevOps) Space - Practical Approach for "Lightway" Threat Modeling as a Code