Security Threat Modeling Live from Scratch Session
summary
Presents a lightweight, one-hour session threat-modeling script derived from the Mozilla rapid risk assessment and applied to Flux (a GitOps deployer), using a data flow diagram and a standardized questionnaire plus a data classification matrix. Finds concrete issues: source controller serving HTTP enabling MITM, cluster-admin credential exposure, CRDs stored unencrypted, and an experimental Terraform controller scoped out. Produces actionable recommendations and GitHub issues within an hour, demonstrating the process yields pragmatic fixes quickly.
AI-written summary · about
chapters (14)
- 0:00Introduction to GitOps
- 1:30CNCF security assessments
- 3:48Rapid risk assessment framework
- 5:53Applying the framework
- 8:35Flux security overview
- 10:49The assessment process
- 13:00Data flows and boundaries
- 17:58Component analysis
- 19:40Protocol taxonomy
- 22:11Attacker mindset
- 27:24Data storage risks
- 32:30Control identification
- 35:56Threat scenarios
- 38:47Final recommendations
related talks
38mThreat Modelling Kubernetes: A Lightspeed Introduction
29mThreat Modelling 101
46mThreat modeling is on the rise
57mUnlocking Threat Modeling
43mThreat modeling
26mYou Too Can Do Threat Modeling
49mThreat Modeling Toolkit
31mThreat Modeling for Kubernetes: Enhancing Security Posture in Complex and Regulat...