> Markdown version of [/events/world-congress-2024/sessions/253-better-safe-than](https://www.wearedevelopers.com/events/world-congress-2024/sessions/253-better-safe-than). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Better safe than sorry: Threat Modeling for Web Developers


- **Date:** Friday, Jul 19, 2024
- **Time:** 09:00–09:30 (30 min)
- **Room:** STAGE 6 (120)
- **Event:** World Congress 2024

## Description

Every developer wants to write good code. 
Good code, that also means security against attackers and their threats. But how secure is your code really? Do you cover all relevant threats? Or are you aiming for the wrong target, forgetting relevant attacks?
The talk explains how you can use Threat Modeling to assess your application in a systematic approach against the threats that are relevant to your use cases and your attack surface. It covers relevant methods and frameworks and offers a very practice-oriented and all-round introduction into the security activity Threat Modeling.


## Speaker

### [Clemens Hübner](https://www.wearedevelopers.com/@clemens-hubner)

Software Security Engineer


## Related talks at this congress

- [Real-world Threat Modeling](https://www.wearedevelopers.com/events/world-congress-2024/sessions/163-real-world-threat) — Ali Yazdani
- [How Can My Software Development Be 'Secure by Design'?](https://www.wearedevelopers.com/events/world-congress-2024/sessions/295-how-can-my-software) — Christoph Niehoff
- [Programming secure C#/.NET Applications: Dos & Don'ts](https://www.wearedevelopers.com/events/world-congress-2024/sessions/198-programming-secure-c) — Sebastian Leuer
- [Plants vs thieves: Automated Tests in the World of Web Security](https://www.wearedevelopers.com/events/world-congress-2024/sessions/144-plants-vs-thieves) — Ramona Schwering