Demystifying the Threat Model, Making It Real

No ratings

Presented at BSidesChicago 2019 by

Threat modeling, for many, remains an ethereal concept they only loosely understand. Despite attempts to simplify it with things like Microsoft's SDL, STRIDE, cheatsheets, etc. it is often viewed as complex and time consuming. In this session, we'll work interactively to simplify the process, breaking it down in a way you've likely never seen before. This will be a live, real-word, demonstration of how easy and efficiently threat modeling can be performed. We'll bypass all those overwhelming frameworks and give you actual experience with what matters most when you are dissecting threats faced by your systems, applications, or organization.