Agilifying Threat Modeling in Development Teams
summary
Describes a practical approach to catch business-logic vulnerabilities early in the development lifecycle by integrating tooling and processes into development teams. Covers concrete techniques for automated and developer-friendly detection (shift-left testing, IDE or CI-integrated checks) and how to wrap those tools into an understandable, non-disruptive Agile process for engineering teams.
AI-written summary · about
chapters (6)
- 0:00Introduction
- 2:59Security adoption challenges
- 8:39Methodologies and teams
- 10:45Practical threat modeling
- 23:27Results and effectiveness
- 25:16Q&A
related talks
22mEmpowering Developers through Threat Modeling Excellence
35mValue Driven Threat Modeling
38mIterative Threat Modelling: Security in Agile Development
57mIntroducing Threat Modelling To Established Teams
51mApplication Threat Modeling Implementation Tips and Tricks
57mWhat Could Possibly Go Wrong? Plain Language Threat Modeling in DevSecOps
43mThreat modeling
01h 00mThreat Modeling for Secure Software Design