> Markdown version of [/events/world-congress-2024/sessions/163-real-world-threat](https://www.wearedevelopers.com/events/world-congress-2024/sessions/163-real-world-threat). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Real-world Threat Modeling


- **Date:** Thursday, Jul 18, 2024
- **Time:** 14:50–15:20 (30 min)
- **Room:** STAGE 7 (500)
- **Event:** World Congress 2024

## Recording

[Watch recording](https://www.wearedevelopers.com/videos/936-real-world-threat-modeling)

## Description

The presentation on "Real-world Threat Modeling" provides a practical exploration of the threat modeling process within the context of modern software development. It covers the essential components of threat modeling methodologies and illustrates how organizations go about identifying, assessing, and mitigating security risks in their applications.

The presentation begins with an introduction to the significance of threat modeling in the software development lifecycle, emphasizing its role in bolstering application security. It then breaks down key components of a threat model, such as assets, threats, vulnerabilities, and countermeasures.

The focus shifts to a hands-on approach by providing an application architecture overview, detailing components, data flows, and dependencies. Attendees gain insights into the process of identifying critical assets, mapping data flows, and conducting a thorough threat identification exercise.



## Speaker

### [Ali Yazdani](https://www.wearedevelopers.com/@ali-yazdani)

Principal Security Engineer at Payrails


## Related talks at this congress

- [Better safe than sorry: Threat Modeling for Web Developers](https://www.wearedevelopers.com/events/world-congress-2024/sessions/253-better-safe-than) — Clemens Hübner
- [How Can My Software Development Be 'Secure by Design'?](https://www.wearedevelopers.com/events/world-congress-2024/sessions/295-how-can-my-software) — Christoph Niehoff
- [The AI Security Survival Guide: Practical Advice for Stressed-Out Developers](https://www.wearedevelopers.com/events/world-congress-2024/sessions/300-the-ai-security) — Mackenzie
- [Plants vs thieves: Automated Tests in the World of Web Security](https://www.wearedevelopers.com/events/world-congress-2024/sessions/144-plants-vs-thieves) — Ramona Schwering