Real-world Threat Modeling

The presentation on “Real-world Threat Modeling” provides a practical exploration of the threat modeling process within the context of modern software development. It covers the essential components of threat modeling methodologies and illustrates how organizations go about identifying, assessing, and mitigating security risks in their applications.

The presentation begins with an introduction to the significance of threat modeling in the software development lifecycle, emphasizing its role in bolstering application security. It then breaks down key components of a threat model, such as assets, threats, vulnerabilities, and countermeasures.

The focus shifts to a hands-on approach by providing an application architecture overview, detailing components, data flows, and dependencies. Attendees gain insights into the process of identifying critical assets, mapping data flows, and conducting a thorough threat identification exercise.