Better safe than sorry: Threat Modeling for Web Developers

Every developer wants to write good code. Good code, that also means security against attackers and their threats. But how secure is your code really? Do you cover all relevant threats? Or are you aiming for the wrong target, forgetting relevant attacks? The talk explains how you can use Threat Modeling to assess your application in a systematic approach against the threats that are relevant to your use cases and your attack surface. It covers relevant methods and frameworks and offers a very practice-oriented and all-round introduction into the security activity Threat Modeling.