World Congress 2024 • Aug 20, 2024 • Session details

Real-world Threat Modeling

Stop treating security as an afterthought. Shift left with the STRIDE framework to catch and eliminate critical vulnerabilities before a single line of code is written.

Real-world Threat Modeling thumbnail

Checking access…

Playback and chapters load privately for Free videos.

Matching moments

3:07 min

Introducing collaborative threat modeling workshops in engineering teams

Bruno Amaro Almeida · World Congress 2022

1:32 min

Pairing with teams for continuous threat modeling

Nazneen Rupawalla · World Congress 2022

2:31 min

Addressing insecure design through early threat modeling

Christian Wenz

Christian Wenz · World Congress 2026 Europe

4:07 min

Implementing a continuous threat modeling pilot program

Farshad Abasi

Farshad Abasi · World Congress 2026 North America

2:35 min

Integrating security across the application development lifecycle

Niels Tanis

Niels Tanis · World Congress 2022

2:00 min

Evolution of software development and threat modeling methodologies

Farshad Abasi

Farshad Abasi · World Congress 2026 North America

More from World Congress 2024

Beyond the Hype: Real-World AI Strategies Panel thumbnail

Beyond the Hype: Real-World AI Strategies Panel

Mike Butcher +3

Carl Lapierre - Exploring Advanced Patterns in Retrieval-Augmented Generation thumbnail

Carl Lapierre - Exploring Advanced Patterns in Retrieval-Augmented Generation

Carl Lapierre · Osedea

Coding an Immersive Copilot using Unity / .NET and Azure OpenAI! thumbnail

Coding an Immersive Copilot using Unity / .NET and Azure OpenAI!

Zaid Zaim · Neo4j

Building a diverse tech company: The power of Diversity, Equity, Inclusion, and Belonging thumbnail

Building a diverse tech company: The power of Diversity, Equity, Inclusion, and Belonging

Sue Quackenbush · Dynatrace

Livecoding with AI thumbnail

Livecoding with AI

Rainer Stropek · software architects

Dapr in Practice thumbnail

Dapr in Practice

marcklefter · AxonIQ

Upcoming sessions on this topic

Supply Chain Security for the Everyday Engineer

Pradumna Saraf

Kestra Technologies

Quality Assurance Engineer

The Dream Team You Didn't Know You Had - Multi-Model, Multi-Agent, One Software Lifecycle

Aditya Dua

GitHub

Senior Manager, Field Services, SAARC

Beyond the Model Wars: What to Learn, Unlearn, and Focus On

Dhiwakar Kusuma

GitHub

Senior Technical Partner Manager

From Monolith to Phases: Restructuring Terraform Deployments That Work in Any Cloud

Naveen Kumar Kalapala

Infosys Ltd

Lead Cloud Engineer

Architecting Secure and Encrypted Microservices in K8s

Arushi Garg

Adobe

SDE-2
MV Shiva

Google

SWE

Beware of Strangers Bearing Code: Open Source Trust in the Agent Era

Vikram Vaswani

Consultant

Related videos

Your Threat Model Is Lying to You: Why Modeling the Design Isn’t Enough in 2026 thumbnail

Your Threat Model Is Lying to You: Why Modeling the Design Isn’t Enough in 2026

Farshad Abasi · Eureka DevSecOps and Forward Security

World Congress North America · 2026

Security Pitfalls for Software Engineers thumbnail

Security Pitfalls for Software Engineers

Jasmin Azemović · HTEC

World Congress · 2023

You can’t hack what you can’t see thumbnail

You can’t hack what you can’t see

Reto Kaeser

LIVE · Oct 2020

Walking into the era of Supply Chain Risks thumbnail

Walking into the era of Supply Chain Risks

Vandana Verma

LIVE · Apr 2022

Software Security 101: Secure Coding Basics thumbnail

Software Security 101: Secure Coding Basics

Thomas Konrad

World Congress · 2021

Climate vs. Weather: How Do We Sustainably Make Software More Secure? thumbnail

Climate vs. Weather: How Do We Sustainably Make Software More Secure?

LIVE · Feb 2022

Related articles

BB

Benedikt Bischof

Walking Into The Era of Supply Chain Risks

Welcome to this issue of the WeAreDevelopers Live Talk series. This article recaps an interesting talk by Vandana Verma who introduced the audience interesting topic of supply chain risks.About the...

over 4 years ago

Walking Into The Era of Supply Chain Risks

DC

Daniel Cranney

Understanding and Mitigating Common Web Vulnerabilities

Vulnerabilities exist in many forms on the web, and attackers continue to find creative ways to exploit them. Technological advances like the proliferation of AI are of course exciting nd filled wi...

over 1 year ago

An image with neon lighting featuring a globe and a padlock

DC

Daniel Cranney

Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.

Everyone thinks CISOs make the final call on security tools. But in modern software organisations, adoption starts long before the boardroom, inside CI/CD pipelines, developer workflows, and pull r...

9 months ago

A room full of people at a tech conference

AB

Andre Braun, GitLab

Now is the time for industrialized software development

Now is the time for industrialized software development Recently, I received a letter from my car’s manufacturer alerting me to a recall. They had discovered a defective part and wanted to replace ...

over 1 year ago

A person developint HTML on a laptop with the sun shining on it.

From learning to earning

Jobs that call for the skills explored in this talk.

Senior Threat Intelligence Analyst

Expert Profiling Cybercrime Mitre Att&ck

Product Security Incident Response Analyst

Expert $329k Remote Github Code Review Data Analysis

Senior Threat Intelligence Analyst

Oberkochen, Germany

Expert Profiling Cybercrime Mitre Att&ck

Staff Security Data Engineer

Experienced Remote Github Airflow Terraform

2 months ago • Verified

SoC Offensive Security Staff Engineer

Austin, United States

Experienced $198k–268k Remote Network Security

about 2 months ago • Verified

Senior Product Security Architect

Austin, United States

Expert Remote Agentic AI Security Architecture