Practical Threat Modeling for Software Developers
-
Mudassir Syed
Autodesk
Security Software Engineer
This session focuses on spotting those risks early by thinking through how an LLM app can be misused or broken.
We’ll discuss common attack patterns like prompt injection, data leakage, tool abuse, and jailbreaks, using familiar setups such as RAG pipelines, agents, and function calling. We’ll also talk about how teams intentionally test these scenarios, what usually gets missed, and which defenses actually help in production.
Attendees will have a simple, reusable threat-modeling approach and a practical checklist they can apply to their own LLM applications, without slowing down development or overcomplicating security.
World Congress 2026 North America
Mudassir Syed
Autodesk
Security Software Engineer
Farshad Abasi
Eureka DevSecOps and Forward Security
Founder & CEO
Desmond Lamptey
Capital One
Lead Software Engineer
Emmanuel Acheampong
Crusoe AI
Sr. Manager Developer Relations