Cornucopia
summary
version 2 released, with print-ready decks in two sizes and six languages and a new mobile app edition mapped to MAS/MSVS tests. The project provides an online playable implementation (donated to the OWASP foundation), generators that turn InDesign/YAML into printable cards, and Elixir-based web tooling that teams self-host if desired. Teams use the cards with Threat Dragon and Jira, auditors report stronger ISO 27001 evidence, and the method scales threat modeling across many agile teams.
AI-written summary · about
chapters (18)
- 0:00OWASP Cornucopia intro
- 1:30Why Cornucopia matters now
- 4:22Games vs AI for threat modeling
- 6:05Cornucopia born in 2012
- 8:37Paper cards to digital decks
- 11:56Cornucopia v2 features
- 13:22Mobile app edition
- 16:56Beyond card games for learning
- 18:25Cornucopia online during pandemic
- 20:34Future plans and collaboration
- 22:25Live competition and Q&A
- 26:50Design and artwork details
- 29:42Running Cornucopia sessions
- 33:35Training needed to play
- 35:00Security champions and teams
- 36:51Self-hosting setup
- 37:55Time management for sessions
- 39:00Closing and next steps
related talks
49mCloud Threat Gamification: Lessons Learned and How to Set One Up
31m📙 Level Up Your Threat Modeling: Turning Security Into a Team Adventure 🖥️
59mBackdoors & Breaches: Live Tabletop Exercise Demo
21mA tool to help improve your threat modeling
30mAgile Threat Modeling with Open-Source Tools
45mLeveraging Projects and Tools to Transform Your SDLC
46m“Mobile Wanderlust”! Our Journey to Version 2 0!
34mThreat Model-as-Code