Educational Workshop Series for Threat Modeling: Automated Tools vs Manual Methods

Join us for a live discussion on threat modeling with industry experts Adam Shostack and Steven de Vries. Learn about the differences between manual and automated threat modeling, how to integrate threat modeling into agile processes, and the latest trends and tools in the field.

Adam also shares insights from his new book "Threats - What Every Engineer Should Learn from Star Wars."

Speaker: Adam Shostack / Leading expert in threat modeling+ secure by design
Linkedin: linkedin.com/in/shostack
Website: shostack.org
Blog: shostack.org/blog/

Video Sections:
00:00 Introduction
01:15 New Book Announcement: Threats - What Every Engineer Should Learn from Star Wars
01:30 Discussion on Manual vs. Automated Threat Modeling
02:17 The State of Threat Modeling in Organizations
02:56 Common Misconceptions About Threat Modeling
04:07 Issues with Heavyweight Threat Modeling
05:00 Who Should Do Threat Modeling
06:10 Importance of Making Threat Modeling Lightweight
07:00 Formalizing Threat Modeling in Agile Environments
08:04 The Four Questions Framework for Threat Modeling
09:02 Integrating Threat Modeling into Agile Processes
11:00 Changes in the Market and Adoption of Threat Modeling
12:05 Tools and Automation in Threat Modeling
12:48 Real-World Success Stories
13:27 Regulatory Requirements and Threat Modeling
14:00 Audience Poll on Automated vs. Manual Threat Modeling
15:01 Questions from the Audience: Best Process for Vehicle Networks
18:08 Automated vs. Manual Threat Modeling
20:58 Using Patterns in Threat Modeling
22:15 Feedback from Pentesting Teams
27:00 Making Threat Modeling More Accessible

#threatmodeling #cybersecurity #softwaresecurity #agilesoftwaredevelopment

Видео Educational Workshop Series for Threat Modeling: Automated Tools vs Manual Methods канала IriusRisk