WEBVTT

1
00:00:02.135 --> 00:00:03.645
<00:00:02.135>Hello <00:00:02.814>everyone <00:00:03.494>again,

2
00:00:04.145 --> 00:00:06.965
<00:00:04.145>and <00:00:04.425>welcome <00:00:04.704>to <00:00:04.984>my <00:00:05.265>presentation <00:00:05.545>on

3
00:00:07.275 --> 00:00:08.405
<00:00:07.275>real <00:00:07.614>world <00:00:07.952>threat <00:00:08.292>modeling.

4
00:00:08.975 --> 00:00:10.485
<00:00:08.975>Sorry <00:00:09.314>for <00:00:09.654>the <00:00:09.994>technical <00:00:10.334>issue,

5
00:00:10.545 --> 00:00:13.005
<00:00:10.545>but <00:00:10.685>you <00:00:10.825>know, <00:00:10.965>the <00:00:11.105>technical <00:00:11.245>issue <00:00:11.385>is <00:00:11.525>part <00:00:11.665>of <00:00:11.805>our <00:00:11.945>life.

6
00:00:14.865 --> 00:00:16.965
<00:00:14.865>And <00:00:15.145>my <00:00:15.425>name <00:00:15.705>is <00:00:15.985>Ali <00:00:16.265>Asani.

7
00:00:17.005 --> 00:00:21.245
<00:00:17.005>I <00:00:17.145>am, <00:00:17.285>uh, <00:00:17.424>in <00:00:17.564>the <00:00:17.705>security <00:00:17.845>game <00:00:17.985>for <00:00:18.125>over <00:00:18.265>10 <00:00:18.404>years,

8
00:00:21.305 --> 00:00:24.565
<00:00:21.305>and <00:00:21.480>right <00:00:21.655>now <00:00:21.830>a <00:00:22.005>principal <00:00:22.180>security <00:00:22.355>engineer <00:00:22.530>at <00:00:22.705>pays.

9
00:00:25.385 --> 00:00:29.125
<00:00:25.385>Uh, <00:00:25.560>I <00:00:25.735>also <00:00:25.910>lead <00:00:26.085>the <00:00:26.260>OS <00:00:26.435>DevSecOps <00:00:26.610>Guideline <00:00:26.785>project,

10
00:00:29.255 --> 00:00:31.925
<00:00:29.255>which <00:00:29.535>is <00:00:29.814>a <00:00:30.095>guideline <00:00:30.375>for <00:00:30.654>who

11
00:00:32.105 --> 00:00:35.725
<00:00:32.104>or <00:00:32.305>companies <00:00:32.504>wants <00:00:32.705>to <00:00:32.904>implement <00:00:33.105>DevSecOps, <00:00:33.305>which <00:00:33.504>try

12
00:00:35.725 --> 00:00:37.765
<00:00:35.725>to <00:00:36.075>give <00:00:36.425>them <00:00:36.775>some <00:00:37.125>guidelines.

13
00:00:38.075 --> 00:00:41.165
<00:00:38.075>It's <00:00:38.230>open <00:00:38.386>source <00:00:38.541>project, <00:00:38.697>if <00:00:38.852>you <00:00:39.008>want, <00:00:39.163>you <00:00:39.319>can, <00:00:39.475>uh,

14
00:00:41.165 --> 00:00:42.165
<00:00:41.165>contribute <00:00:41.615>on <00:00:42.065>that.

15
00:00:43.905 --> 00:00:48.605
<00:00:43.905>And <00:00:44.105>here <00:00:44.305>I <00:00:44.505>took <00:00:44.705>some <00:00:44.905>screenshots <00:00:45.105>from <00:00:45.305>Bug

16
00:00:48.605 --> 00:00:49.965
<00:00:48.605>Bounty <00:00:49.217>program <00:00:49.829>reports

17
00:00:50.795 --> 00:00:55.645
<00:00:50.795>that <00:00:50.995>you <00:00:51.195>can <00:00:51.395>see <00:00:51.595>a <00:00:51.795>Snapchat <00:00:51.995>paid <00:00:52.195>$25,000

18
00:00:56.305 --> 00:00:57.965
<00:00:56.305>for <00:00:56.655>a <00:00:57.005>bug, <00:00:57.355>which <00:00:57.705>was

19
00:00:59.205 --> 00:01:03.845
<00:00:59.205>a <00:00:59.379>Kubernetes <00:00:59.555>API <00:00:59.730>exposed, <00:00:59.905>and <00:01:00.080>it <00:01:00.254>cause <00:01:00.430>off <00:01:00.605>RCE

20
00:01:03.865 --> 00:01:06.285
<00:01:03.865>or <00:01:04.215>remote <00:01:04.565>code <00:01:04.915>execution <00:01:05.265>vulnerability,

21
00:01:06.355 --> 00:01:08.845
<00:01:06.355>that <00:01:06.588>exposed <00:01:06.821>credential <00:01:07.055>to <00:01:07.288>the <00:01:07.521>whole <00:01:07.755>world.

22
00:01:10.025 --> 00:01:11.405
<00:01:10.025>Uh, <00:01:10.335>bug <00:01:10.646>Hunter <00:01:10.956>found <00:01:11.267>it

23
00:01:11.545 --> 00:01:15.045
<00:01:11.545>and <00:01:11.895>applied <00:01:12.245>on <00:01:12.595>high <00:01:12.945>care,

24
00:01:15.105 --> 00:01:18.685
<00:01:15.105>one <00:01:15.260>Black <00:01:15.416>Bounty <00:01:15.571>platform <00:01:15.727>and <00:01:15.882>got <00:01:16.038>that <00:01:16.193>bounty <00:01:16.349>from <00:01:16.505>Snapchat.

25
00:01:19.145 --> 00:01:21.205
<00:01:19.145>And <00:01:19.378>you <00:01:19.611>know <00:01:19.845>what, <00:01:20.078>why <00:01:20.311>this <00:01:20.545>happened?

26
00:01:21.435 --> 00:01:25.405
<00:01:21.435>Because <00:01:21.785>this, <00:01:22.135>uh, <00:01:22.485>Kubernetes, <00:01:22.835>uh,

27
00:01:27.405 --> 00:01:30.005
<00:01:27.405>instance <00:01:27.560>was <00:01:27.716>already <00:01:27.871>exposed <00:01:28.027>into <00:01:28.182>the <00:01:28.338>whole <00:01:28.493>world <00:01:28.649>in <00:01:28.805>the

28
00:01:30.005 --> 00:01:34.485
<00:01:30.005>production, <00:01:30.179>but <00:01:30.354>how <00:01:30.530>we <00:01:30.705>changed <00:01:30.880>to <00:01:31.054>radio <00:01:31.229>reduce <00:01:31.405>amount

29
00:01:34.485 --> 00:01:38.565
<00:01:34.485>of <00:01:34.640>this <00:01:34.796>type <00:01:34.951>of <00:01:35.107>problem <00:01:35.262>that <00:01:35.418>we <00:01:35.573>have, <00:01:35.729>the <00:01:35.885>main

30
00:01:39.715 --> 00:01:42.125
<00:01:39.715>area <00:01:40.065>is <00:01:40.415>shift <00:01:40.765>left <00:01:41.115>security

31
00:01:42.265 --> 00:01:47.205
<00:01:42.265>and <00:01:42.392>shift <00:01:42.519>left <00:01:42.646>journey <00:01:42.774>that <00:01:42.901>we <00:01:43.028>want <00:01:43.155>to <00:01:43.283>take <00:01:43.410>as <00:01:43.537>a <00:01:43.665>developer

32
00:01:47.225 --> 00:01:49.365
<00:01:47.225>and <00:01:47.505>someone <00:01:47.785>that's <00:01:48.065>working <00:01:48.345>in <00:01:48.625>charge

33
00:01:49.365 --> 00:01:50.805
<00:01:49.365>with <00:01:49.797>the <00:01:50.229>development <00:01:50.661>process.

34
00:01:51.025 --> 00:01:55.685
<00:01:51.025>We <00:01:51.152>know <00:01:51.279>that <00:01:51.406>this <00:01:51.534>Dr, <00:01:51.661>that <00:01:51.788>idea <00:01:51.915>came <00:01:52.043>to <00:01:52.170>the <00:01:52.297>design <00:01:52.425>code,

35
00:01:55.945 --> 00:01:57.245
<00:01:55.945>deploy <00:01:56.530>and <00:01:57.115>test.

36
00:01:57.755 --> 00:02:00.445
<00:01:57.755>This <00:01:57.955>is <00:01:58.155>a <00:01:58.354>traditional <00:01:58.554>way <00:01:58.755>of <00:01:58.955>product <00:01:59.155>deployment

37
00:02:00.445 --> 00:02:01.445
<00:02:00.445>that <00:02:00.625>we <00:02:00.804>had <00:02:00.985>in <00:02:01.164>the <00:02:01.345>past.

38
00:02:02.185 --> 00:02:04.845
<00:02:02.185>And <00:02:02.360>when <00:02:02.535>I <00:02:02.710>was <00:02:02.885>working <00:02:03.060>in <00:02:03.235>the <00:02:03.410>telecommunication <00:02:03.585>companies,

39
00:02:05.285 --> 00:02:07.165
<00:02:05.285>I <00:02:05.518>got <00:02:05.751>inform <00:02:05.985>as <00:02:06.218>a <00:02:06.451>security <00:02:06.685>engineer

40
00:02:07.225 --> 00:02:10.405
<00:02:07.225>for <00:02:07.458>test <00:02:07.691>application <00:02:07.925>when <00:02:08.158>application <00:02:08.391>was <00:02:08.625>up

41
00:02:10.405 --> 00:02:11.645
<00:02:10.405>and <00:02:10.684>running <00:02:10.963>in <00:02:11.242>the <00:02:11.521>production.

42
00:02:12.065 --> 00:02:15.525
<00:02:12.065>And, <00:02:12.220>you <00:02:12.376>know, <00:02:12.531>this <00:02:12.687>is, <00:02:12.842>this <00:02:12.998>is <00:02:13.153>super <00:02:13.309>late, <00:02:13.465>and

43
00:02:15.525 --> 00:02:18.725
<00:02:15.525>after <00:02:15.680>that, <00:02:15.836>we <00:02:15.991>start <00:02:16.147>to <00:02:16.302>shift <00:02:16.458>security <00:02:16.613>to <00:02:16.769>the <00:02:16.925>left.

44
00:02:19.185 --> 00:02:20.685
<00:02:19.185>So <00:02:19.522>we <00:02:19.860>put <00:02:20.197>the <00:02:20.535>test

45
00:02:20.945 --> 00:02:24.925
<00:02:20.945>before <00:02:21.100>deploy <00:02:21.256>into <00:02:21.411>the <00:02:21.567>production <00:02:21.722>to <00:02:21.878>reduce <00:02:22.033>amount <00:02:22.189>of <00:02:22.345>issues

46
00:02:25.035 --> 00:02:26.525
<00:02:25.035>that <00:02:25.303>are <00:02:25.571>going <00:02:25.839>to <00:02:26.107>the <00:02:26.376>production.

47
00:02:27.945 --> 00:02:31.445
<00:02:27.945>But <00:02:28.100>that <00:02:28.256>was <00:02:28.411>not <00:02:28.567>enough. <00:02:28.722>Uh, <00:02:28.878>that <00:02:29.033>was <00:02:29.189>not <00:02:29.345>enough.

48
00:02:31.745 --> 00:02:36.245
<00:02:31.745>So <00:02:31.872>we <00:02:31.999>shift <00:02:32.126>security <00:02:32.254>to <00:02:32.381>the <00:02:32.508>more, <00:02:32.635>more <00:02:32.763>to <00:02:32.890>the <00:02:33.017>left <00:02:33.145>side

49
00:02:36.585 --> 00:02:40.765
<00:02:36.585>by <00:02:36.725>in <00:02:36.865>charging <00:02:37.005>security <00:02:37.145>as <00:02:37.285>a <00:02:37.425>part <00:02:37.565>of <00:02:37.705>code <00:02:37.845>development <00:02:37.985>by

50
00:02:41.285 --> 00:02:44.325
<00:02:41.285>implementing <00:02:41.751>Secure <00:02:42.218>Pipelines <00:02:42.685>development.

51
00:02:44.435 --> 00:02:48.925
<00:02:44.435>Like <00:02:44.551>as <00:02:44.668>you, <00:02:44.785>as <00:02:44.901>you <00:02:45.018>hear <00:02:45.135>about <00:02:45.251>in <00:02:45.368>your <00:02:45.485>company, <00:02:45.601>if <00:02:45.718>you <00:02:45.835>are,

52
00:02:48.985 --> 00:02:52.685
<00:02:48.985>if <00:02:49.140>you <00:02:49.296>are <00:02:49.451>not <00:02:49.607>security <00:02:49.762>engineer <00:02:49.918>from, <00:02:50.073>uh, <00:02:50.229>security <00:02:50.385>guys

53
00:02:52.705 --> 00:02:55.565
<00:02:52.704>or <00:02:52.860>bad <00:02:53.016>guys <00:02:53.171>in <00:02:53.327>your <00:02:53.482>company <00:02:53.638>that <00:02:53.793>always <00:02:53.949>nagging <00:02:54.105>about

54
00:02:56.145 --> 00:02:59.485
<00:02:56.145>did <00:02:56.345>you <00:02:56.545>implement <00:02:56.745>s <00:02:56.945>um, <00:02:57.145>software <00:02:57.345>composition <00:02:57.545>analysis?

55
00:02:59.785 --> 00:03:01.125
<00:02:59.785>Do, <00:03:00.026>do <00:03:00.267>you <00:03:00.508>have <00:03:00.749>s <00:03:00.991>spam?

56
00:03:01.145 --> 00:03:02.485
<00:03:01.145>Do <00:03:01.446>you <00:03:01.748>have <00:03:02.049>a <00:03:02.351>SaaS

57
00:03:02.545 --> 00:03:04.965
<00:03:02.545>or <00:03:02.744>a <00:03:02.945>static <00:03:03.144>application <00:03:03.345>security <00:03:03.545>test <00:03:03.744>or <00:03:03.945>not?

58
00:03:05.585 --> 00:03:08.525
<00:03:05.585>And <00:03:05.740>this <00:03:05.896>is, <00:03:06.051>this <00:03:06.207>is <00:03:06.362>the <00:03:06.518>journey <00:03:06.673>that <00:03:06.829>we <00:03:06.985>passed.

59
00:03:09.905 --> 00:03:13.525
<00:03:09.905>And <00:03:10.060>right <00:03:10.216>now <00:03:10.371>we <00:03:10.527>are <00:03:10.682>talking <00:03:10.838>about <00:03:10.993>shifting <00:03:11.149>security <00:03:11.305>more

60
00:03:13.525 --> 00:03:16.365
<00:03:13.525>to <00:03:13.725>the <00:03:13.925>left <00:03:14.125>side <00:03:14.325>and <00:03:14.525>thinking <00:03:14.725>about <00:03:14.925>security.

61
00:03:16.735 --> 00:03:21.405
<00:03:16.735>While <00:03:16.910>we <00:03:17.085>are, <00:03:17.260>uh, <00:03:17.435>try <00:03:17.610>to <00:03:17.785>design <00:03:17.960>a <00:03:18.135>code

62
00:03:24.505 --> 00:03:27.365
<00:03:24.505>for <00:03:24.680>that, <00:03:24.855>we <00:03:25.030>have <00:03:25.204>to <00:03:25.380>think <00:03:25.555>about <00:03:25.730>threat <00:03:25.905>modeling.

63
00:03:27.465 --> 00:03:29.245
<00:03:27.465>Threat <00:03:27.745>modeling <00:03:28.025>is <00:03:28.305>a <00:03:28.585>good <00:03:28.865>practice

64
00:03:29.865 --> 00:03:32.085
<00:03:29.865>for <00:03:30.215>having <00:03:30.565>a <00:03:30.915>secure <00:03:31.265>design.

65
00:03:32.645 --> 00:03:35.445
<00:03:32.645>B <00:03:32.925>for, <00:03:33.205>uh, <00:03:33.485>implementing <00:03:33.765>the <00:03:34.045>code

66
00:03:35.505 --> 00:03:39.325
<00:03:35.505>and <00:03:35.660>code <00:03:35.816>will, <00:03:35.971>will <00:03:36.127>be <00:03:36.282>permanently <00:03:36.438>part <00:03:36.593>of <00:03:36.749>our <00:03:36.905>products.

67
00:03:40.985 --> 00:03:42.445
<00:03:40.985>But <00:03:41.313>what <00:03:41.642>is <00:03:41.970>threat <00:03:42.299>modeling?

68
00:03:42.785 --> 00:03:46.565
<00:03:42.785>Threat <00:03:42.960>modeling <00:03:43.135>is <00:03:43.310>a <00:03:43.484>way <00:03:43.660>structured <00:03:43.835>way <00:03:44.010>to <00:03:44.185>identify,

69
00:03:47.285 --> 00:03:52.045
<00:03:47.285>quantify <00:03:47.484>and, <00:03:47.685>uh, <00:03:47.885>security <00:03:48.085>risk <00:03:48.285>that <00:03:48.484>we <00:03:48.685>have

70
00:03:53.025 --> 00:03:56.765
<00:03:53.025>and <00:03:53.180>try <00:03:53.336>to, <00:03:53.491>to <00:03:53.647>prepare <00:03:53.802>a <00:03:53.958>mitigation <00:03:54.113>plan <00:03:54.269>for <00:03:54.425>that.

71
00:03:58.745 --> 00:04:03.405
<00:03:58.745>And <00:03:58.885>what <00:03:59.025>is <00:03:59.165>the <00:03:59.305>goal? <00:03:59.445>The <00:03:59.585>goal <00:03:59.725>is <00:03:59.865>identify <00:04:00.005>problems, <00:04:00.145>try

72
00:04:03.465 --> 00:04:06.805
<00:04:03.465>to <00:04:03.640>redesign <00:04:03.815>products <00:04:03.990>based <00:04:04.165>on <00:04:04.340>that <00:04:04.515>to <00:04:04.690>solve <00:04:04.865>them

73
00:04:07.705 --> 00:04:10.565
<00:04:07.705>and <00:04:07.860>catch <00:04:08.016>issues <00:04:08.171>as <00:04:08.327>much <00:04:08.482>as <00:04:08.638>early <00:04:08.793>that <00:04:08.949>we <00:04:09.105>can.

74
00:04:11.865 --> 00:04:13.405
<00:04:11.865>And <00:04:12.142>why <00:04:12.419>we <00:04:12.696>need <00:04:12.973>product <00:04:13.251>modeling.

75
00:04:13.905 --> 00:04:18.245
<00:04:13.905>The <00:04:14.080>answer <00:04:14.255>is <00:04:14.430>I <00:04:14.605>think <00:04:14.780>it's <00:04:14.955>super, <00:04:15.130>uh, <00:04:15.305>clear

76
00:04:18.475 --> 00:04:21.045
<00:04:18.475>that <00:04:18.650>we <00:04:18.825>want <00:04:19.000>to <00:04:19.175>reduce <00:04:19.350>the <00:04:19.525>amount <00:04:19.700>of <00:04:19.875>vulnerability

77
00:04:21.265 --> 00:04:25.685
<00:04:21.265>and <00:04:21.404>security <00:04:21.544>issues <00:04:21.685>that <00:04:21.825>we <00:04:21.964>want <00:04:22.104>to, <00:04:22.245>uh, <00:04:22.385>put <00:04:22.525>some <00:04:22.664>efforts,

78
00:04:25.855 --> 00:04:27.605
<00:04:25.855>money <00:04:26.205>development <00:04:26.555>time <00:04:26.905>on <00:04:27.255>that.

79
00:04:28.225 --> 00:04:31.485
<00:04:28.225>So <00:04:28.400>we <00:04:28.575>have <00:04:28.750>to <00:04:28.925>think <00:04:29.100>about <00:04:29.275>the <00:04:29.450>better <00:04:29.625>design

80
00:04:33.425 --> 00:04:37.485
<00:04:33.425>and <00:04:33.600>where <00:04:33.775>security, <00:04:33.950>where <00:04:34.125>threat <00:04:34.300>modeling <00:04:34.475>is <00:04:34.650>in <00:04:34.825>charge.

81
00:04:38.945 --> 00:04:41.645
<00:04:38.945>The <00:04:39.178>best <00:04:39.411>area <00:04:39.645>for <00:04:39.878>having <00:04:40.111>sec <00:04:40.344>uh,

82
00:04:41.645 --> 00:04:45.565
<00:04:41.645>threat <00:04:41.844>modeling <00:04:42.044>is <00:04:42.245>somewhere <00:04:42.445>between <00:04:42.645>design <00:04:42.844>and <00:04:43.044>code.

83
00:04:45.875 --> 00:04:49.085
<00:04:45.875>That <00:04:46.050>okay, <00:04:46.225>we <00:04:46.400>design <00:04:46.575>the <00:04:46.750>code <00:04:46.925>due <00:04:47.100>threat <00:04:47.275>modeling

84
00:04:49.705 --> 00:04:50.725
<00:04:49.705>if <00:04:50.010>it's <00:04:50.317>could <00:04:50.623>pass,

85
00:04:51.465 --> 00:04:55.405
<00:04:51.465>and <00:04:51.665>do <00:04:51.865>we <00:04:52.065>have <00:04:52.265>any, <00:04:52.465>uh, <00:04:52.665>address <00:04:52.865>plan,

86
00:04:55.775 --> 00:04:57.805
<00:04:55.775>addressing <00:04:56.008>plan <00:04:56.241>for <00:04:56.474>all <00:04:56.708>of <00:04:56.941>the, <00:04:57.174>all

87
00:04:57.805 --> 00:04:59.205
<00:04:57.805>of <00:04:58.057>the <00:04:58.309>threats <00:04:58.561>that <00:04:58.813>we <00:04:59.065>detect?

88
00:04:59.745 --> 00:05:03.325
<00:04:59.745>So <00:04:59.885>we <00:05:00.025>are <00:05:00.165>going <00:05:00.305>to <00:05:00.445>the <00:05:00.585>code, <00:05:00.725>if <00:05:00.865>not, <00:05:01.005>we <00:05:01.145>back

89
00:05:03.325 --> 00:05:06.925
<00:05:03.325>to <00:05:03.500>the <00:05:03.675>design <00:05:03.849>review <00:05:04.025>and <00:05:04.200>try <00:05:04.375>to <00:05:04.550>redesign <00:05:04.724>it

90
00:05:07.185 --> 00:05:08.685
<00:05:07.185>and <00:05:07.522>make <00:05:07.860>it <00:05:08.197>more <00:05:08.535>secure.

91
00:05:10.775 --> 00:05:12.565
<00:05:10.775>Let's <00:05:11.241>review <00:05:11.708>some <00:05:12.174>terminologies

92
00:05:12.715 --> 00:05:17.405
<00:05:12.715>that <00:05:12.870>we <00:05:13.026>have <00:05:13.181>on <00:05:13.337>threat <00:05:13.492>modeling <00:05:13.648>weakness, <00:05:13.803>a <00:05:13.959>software <00:05:14.114>defect

93
00:05:17.405 --> 00:05:21.855
<00:05:17.405>or <00:05:17.684>bot <00:05:17.965>user <00:05:18.244>input <00:05:18.525>validation <00:05:18.804>issue

94
00:05:23.235 --> 00:05:27.335
<00:05:23.235>as <00:05:23.515>an <00:05:23.795>example, <00:05:24.075>vulnerability, <00:05:24.355>a <00:05:24.635>weakness

95
00:05:27.485 --> 00:05:28.895
<00:05:27.485>that <00:05:27.908>can <00:05:28.331>be <00:05:28.753>exploited.

96
00:05:29.275 --> 00:05:33.895
<00:05:29.275>So <00:05:29.474>when <00:05:29.674>a <00:05:29.875>weakness <00:05:30.075>exploited <00:05:30.275>it's <00:05:30.474>vulnerability, <00:05:30.674>imagine

97
00:05:33.965 --> 00:05:36.615
<00:05:33.965>that <00:05:34.245>that <00:05:34.525>user <00:05:34.805>input <00:05:35.085>validation <00:05:35.365>error

98
00:05:37.555 --> 00:05:40.855
<00:05:37.555>and <00:05:37.755>that <00:05:37.955>an <00:05:38.155>attacker <00:05:38.355>can <00:05:38.555>put <00:05:38.755>input <00:05:38.955>some

99
00:05:41.655 --> 00:05:42.855
<00:05:41.655>SQL <00:05:42.015>statements <00:05:42.375>on <00:05:42.735>that

100
00:05:42.955 --> 00:05:46.455
<00:05:42.955>and <00:05:43.188>it'll, <00:05:43.421>it'll <00:05:43.655>be <00:05:43.888>SQL <00:05:44.121>injection <00:05:44.354>vulnerability.

101
00:05:48.475 --> 00:05:51.495
<00:05:48.475>An <00:05:48.675>attack <00:05:48.875>is <00:05:49.075>an <00:05:49.275>exploitation <00:05:49.475>of <00:05:49.675>the <00:05:49.875>vulnerabilities

102
00:05:51.875 --> 00:05:56.015
<00:05:51.875>and <00:05:52.050>has <00:05:52.225>three <00:05:52.400>aspects <00:05:52.575>target, <00:05:52.750>which <00:05:52.925>is <00:05:53.100>the <00:05:53.275>goal

103
00:05:56.015 --> 00:05:59.125
<00:05:56.015>of <00:05:56.190>the <00:05:56.365>attack <00:05:56.539>attack <00:05:56.715>vector, <00:05:56.890>which <00:05:57.065>is <00:05:57.240>a <00:05:57.414>path

104
00:05:59.125 --> 00:06:03.325
<00:05:59.125>that <00:05:59.325>attacker <00:05:59.525>take <00:05:59.725>to, <00:05:59.925>uh, <00:06:00.125>exploit <00:06:00.325>the <00:06:00.525>vulnerability.

105
00:06:03.475 --> 00:06:06.125
<00:06:03.475>Like <00:06:03.755>is <00:06:04.035>it <00:06:04.315>a <00:06:04.595>API <00:06:04.875>interface

106
00:06:06.265 --> 00:06:08.085
<00:06:06.265>or <00:06:06.544>web <00:06:06.825>interface <00:06:07.104>that <00:06:07.385>we <00:06:07.664>have,

107
00:06:08.585 --> 00:06:10.645
<00:06:08.585>mobile <00:06:08.864>application <00:06:09.145>or <00:06:09.424>anything <00:06:09.705>like <00:06:09.984>that.

108
00:06:11.305 --> 00:06:13.885
<00:06:11.305>And <00:06:11.538>threat <00:06:11.771>attack <00:06:12.005>is <00:06:12.238>a <00:06:12.471>threat <00:06:12.705>source.

109
00:06:13.985 --> 00:06:15.285
<00:06:13.985>Is <00:06:14.375>it <00:06:14.765>insider <00:06:15.155>threat

110
00:06:15.465 --> 00:06:19.845
<00:06:15.465>or <00:06:15.640>is <00:06:15.815>a <00:06:15.989>hacker <00:06:16.164>from <00:06:16.340>out <00:06:16.515>and <00:06:16.690>attack <00:06:16.864>surface?

111
00:06:20.585 --> 00:06:24.955
<00:06:20.585>Any <00:06:20.760>asset <00:06:20.935>that <00:06:21.109>we <00:06:21.284>have <00:06:21.460>that's <00:06:21.635>in <00:06:21.810>charge <00:06:21.984>in

112
00:06:24.955 --> 00:06:28.555
<00:06:24.955>during <00:06:25.155>the <00:06:25.354>attack, <00:06:25.555>it's <00:06:25.755>a <00:06:25.955>web <00:06:26.155>application, <00:06:26.354>API

113
00:06:28.895 --> 00:06:33.155
<00:06:28.895>or <00:06:29.128>anything <00:06:29.361>that <00:06:29.594>attacker <00:06:29.828>used <00:06:30.061>for, <00:06:30.294>uh,

114
00:06:33.655 --> 00:06:34.755
<00:06:33.655>attack <00:06:34.150>or <00:06:34.645>services

115
00:06:36.015 --> 00:06:39.355
<00:06:36.015>and <00:06:36.365>risk, <00:06:36.715>which <00:06:37.065>is, <00:06:37.414>uh,

116
00:06:40.685 --> 00:06:42.395
<00:06:40.685>equal, <00:06:41.385>uh, <00:06:42.085>impact

117
00:06:42.535 --> 00:06:46.675
<00:06:42.534>and <00:06:42.885>likelihood <00:06:43.234>equal, <00:06:43.585>um, <00:06:43.934>uh,

118
00:06:46.735 --> 00:06:48.155
<00:06:46.735>impact <00:06:47.374>multiple <00:06:48.013>likelihood

119
00:06:48.535 --> 00:06:51.235
<00:06:48.534>and <00:06:48.690>impact <00:06:48.846>is <00:06:49.001>the <00:06:49.157>size <00:06:49.312>of <00:06:49.468>neg, <00:06:49.623>uh, <00:06:49.779>negative <00:06:49.934>consequence

120
00:06:51.235 --> 00:06:52.435
<00:06:51.235>of <00:06:51.775>the <00:06:52.315>risk

121
00:06:53.015 --> 00:06:56.115
<00:06:53.015>and <00:06:53.215>likelihood <00:06:53.414>is, <00:06:53.615>uh, <00:06:53.815>how <00:06:54.015>much <00:06:54.215>is <00:06:54.414>probable

122
00:06:56.255 --> 00:06:57.435
<00:06:56.255>to <00:06:56.786>attack <00:06:57.317>happen.

123
00:06:59.295 --> 00:07:02.515
<00:06:59.295>But <00:06:59.470>we <00:06:59.645>talk <00:06:59.820>about <00:06:59.995>a <00:07:00.170>lot <00:07:00.345>of <00:07:00.520>terminologies <00:07:00.695>here,

124
00:07:03.055 --> 00:07:05.435
<00:07:03.055>but <00:07:03.230>let's <00:07:03.405>see <00:07:03.580>what <00:07:03.755>is <00:07:03.930>the <00:07:04.105>relation <00:07:04.280>between <00:07:04.455>them?

125
00:07:06.015 --> 00:07:08.675
<00:07:06.015>Let <00:07:06.294>me <00:07:06.575>use <00:07:06.854>this <00:07:07.135>magic. <00:07:07.414>Yeah.

126
00:07:08.785 --> 00:07:12.275
<00:07:08.785>Here <00:07:08.912>we <00:07:09.039>have <00:07:09.166>system <00:07:09.294>and <00:07:09.421>system <00:07:09.548>in <00:07:09.675>a, <00:07:09.803>in <00:07:09.930>a <00:07:10.057>good <00:07:10.185>site.

127
00:07:12.585 --> 00:07:16.155
<00:07:12.585>This <00:07:12.724>blue <00:07:12.864>is <00:07:13.005>a <00:07:13.145>good <00:07:13.284>site. <00:07:13.424>Uh, <00:07:13.565>we <00:07:13.705>have <00:07:13.844>a <00:07:13.984>system.

128
00:07:16.455 --> 00:07:17.955
<00:07:16.455>System <00:07:17.130>has <00:07:17.805>data

129
00:07:18.335 --> 00:07:22.595
<00:07:18.335>and <00:07:18.534>functionality, <00:07:18.734>sorry <00:07:18.935>for <00:07:19.135>my, <00:07:19.335>uh, <00:07:19.534>image <00:07:19.734>here.

130
00:07:23.495 --> 00:07:27.115
<00:07:23.495>And <00:07:23.775>functionality <00:07:24.055>and <00:07:24.335>data <00:07:24.615>create <00:07:24.895>value.

131
00:07:27.905 --> 00:07:30.435
<00:07:27.905>This <00:07:28.044>is, <00:07:28.184>this <00:07:28.325>is <00:07:28.465>a <00:07:28.604>whole <00:07:28.744>good <00:07:28.885>side <00:07:29.025>that <00:07:29.164>we <00:07:29.304>have,

132
00:07:31.015 --> 00:07:34.155
<00:07:31.015>but <00:07:31.215>in <00:07:31.414>the <00:07:31.615>bad <00:07:31.815>side, <00:07:32.015>we <00:07:32.215>have <00:07:32.414>actor,

133
00:07:35.085 --> 00:07:36.875
<00:07:35.085>which <00:07:35.551>is <00:07:36.018>causes <00:07:36.484>threat.

134
00:07:37.535 --> 00:07:39.875
<00:07:37.534>And <00:07:37.814>threat <00:07:38.094>could <00:07:38.374>be <00:07:38.655>generate <00:07:38.934>risk

135
00:07:40.495 --> 00:07:42.915
<00:07:40.495>and <00:07:40.961>also <00:07:41.428>exploits <00:07:41.895>vulnerability.

136
00:07:44.335 --> 00:07:48.995
<00:07:44.335>And <00:07:44.614>here <00:07:44.895>functionalities <00:07:45.174>contains <00:07:45.455>some <00:07:45.734>weaknesses

137
00:07:51.185 --> 00:07:54.875
<00:07:51.185>that <00:07:51.465>breaks <00:07:51.745>system, <00:07:52.025>that <00:07:52.305>breaks <00:07:52.585>functionality

138
00:07:55.335 --> 00:07:56.475
<00:07:55.335>and <00:07:55.848>expose <00:07:56.361>data.

139
00:07:57.895 --> 00:08:02.715
<00:07:57.895>And <00:07:58.128>if <00:07:58.361>weakness <00:07:58.594>is <00:07:58.828>exploitable <00:07:59.061>resulting <00:07:59.294>vulnerability,

140
00:08:03.105 --> 00:08:05.875
<00:08:03.105>this <00:08:03.338>is <00:08:03.571>whole <00:08:03.805>relation <00:08:04.038>that <00:08:04.271>we <00:08:04.505>have

141
00:08:06.095 --> 00:08:08.635
<00:08:06.095>and <00:08:06.250>we <00:08:06.406>have <00:08:06.561>to <00:08:06.717>think <00:08:06.872>about <00:08:07.028>that <00:08:07.183>during <00:08:07.339>threat <00:08:07.495>modeling.

142
00:08:11.895 --> 00:08:14.595
<00:08:11.895>But <00:08:12.361>if <00:08:12.828>you <00:08:13.294>hear

143
00:08:14.935 --> 00:08:18.915
<00:08:14.935>before <00:08:15.090>this <00:08:15.246>talk <00:08:15.401>about <00:08:15.557>threat <00:08:15.712>modeling, <00:08:15.868>that <00:08:16.023>of <00:08:16.179>course <00:08:16.335>I,

144
00:08:19.015 --> 00:08:22.155
<00:08:19.015>I'm <00:08:19.131>sure <00:08:19.248>that <00:08:19.365>you <00:08:19.481>heard <00:08:19.598>about <00:08:19.715>that <00:08:19.831>we <00:08:19.948>have <00:08:20.065>a <00:08:20.181>lot <00:08:20.298>of, <00:08:20.414>uh,

145
00:08:22.155 --> 00:08:26.835
<00:08:22.155>methodologies <00:08:22.434>for <00:08:22.715>threat <00:08:22.994>modeling, <00:08:23.275>pasta <00:08:23.554>dried,

146
00:08:28.415 --> 00:08:32.995
<00:08:28.415>um, <00:08:28.695>Okta <00:08:28.975>and <00:08:29.255>try <00:08:29.535>and <00:08:29.815>vast,

147
00:08:33.455 --> 00:08:35.275
<00:08:33.455>but <00:08:33.805>sorry <00:08:34.155>for <00:08:34.505>that <00:08:34.855>part.

148
00:08:36.495 --> 00:08:40.675
<00:08:36.495>But <00:08:36.650>today <00:08:36.806>we <00:08:36.961>want <00:08:37.117>to <00:08:37.272>talk <00:08:37.428>about, <00:08:37.583>I <00:08:37.739>don't <00:08:37.895>want

149
00:08:40.675 --> 00:08:43.235
<00:08:40.674>to <00:08:40.908>give <00:08:41.141>deep <00:08:41.375>dive <00:08:41.608>into <00:08:41.841>the <00:08:42.074>methodologies.

150
00:08:43.475 --> 00:08:47.155
<00:08:43.475>I <00:08:43.591>want <00:08:43.708>to <00:08:43.825>stick <00:08:43.941>to <00:08:44.058>one <00:08:44.175>of <00:08:44.291>that, <00:08:44.408>which <00:08:44.525>is <00:08:44.641>more <00:08:44.758>important, <00:08:44.875>uh,

151
00:08:47.665 --> 00:08:48.795
<00:08:47.665>from <00:08:47.919>my <00:08:48.173>point <00:08:48.427>of <00:08:48.682>view

152
00:08:48.855 --> 00:08:51.195
<00:08:48.855>and <00:08:49.055>more <00:08:49.255>popular <00:08:49.455>that <00:08:49.655>people <00:08:49.855>are <00:08:50.055>using <00:08:50.255>that.

153
00:08:51.815 --> 00:08:56.325
<00:08:51.815>And <00:08:51.955>it's <00:08:52.095>strike, <00:08:52.235>which <00:08:52.375>is <00:08:52.515>de <00:08:52.655>developed <00:08:52.795>by <00:08:52.935>Microsoft <00:08:53.075>in <00:08:53.215>1999

154
00:08:57.225 --> 00:08:59.165
<00:08:57.225>and <00:08:57.575>it <00:08:57.925>has <00:08:58.275>six <00:08:58.625>components.

155
00:09:01.065 --> 00:09:03.245
<00:09:01.065>The <00:09:01.415>first <00:09:01.765>component <00:09:02.115>is <00:09:02.465>spoofing

156
00:09:04.585 --> 00:09:08.365
<00:09:04.585>and, <00:09:04.865>uh, <00:09:05.145>spoofing <00:09:05.425>means <00:09:05.705>any, <00:09:05.985>uh,

157
00:09:09.915 --> 00:09:12.605
<00:09:09.915>someone <00:09:10.194>try <00:09:10.474>to <00:09:10.755>try <00:09:11.035>to, <00:09:11.314>um,

158
00:09:14.265 --> 00:09:18.525
<00:09:14.265>be <00:09:14.615>someone <00:09:14.965>else <00:09:15.314>tampering <00:09:15.665>that,

159
00:09:19.425 --> 00:09:21.805
<00:09:19.425>uh, <00:09:19.658>we <00:09:19.891>try <00:09:20.125>to <00:09:20.358>manipulate <00:09:20.591>some <00:09:20.824>data

160
00:09:22.665 --> 00:09:25.925
<00:09:22.665>and <00:09:23.131>authorize, <00:09:23.598>uh, <00:09:24.064>reputation

161
00:09:26.075 --> 00:09:27.725
<00:09:26.075>that <00:09:26.541>someone <00:09:27.008>did <00:09:27.475>something

162
00:09:28.025 --> 00:09:31.485
<00:09:28.025>but <00:09:28.199>can <00:09:28.375>say <00:09:28.550>that <00:09:28.725>I <00:09:28.900>didn't <00:09:29.074>that <00:09:29.250>that <00:09:29.425>one.

163
00:09:31.945 --> 00:09:34.965
<00:09:31.945>And <00:09:32.120>we <00:09:32.295>don't <00:09:32.470>have <00:09:32.645>any <00:09:32.820>logs <00:09:32.995>that <00:09:33.170>can <00:09:33.345>show

164
00:09:34.965 --> 00:09:36.365
<00:09:34.965>that <00:09:35.385>this <00:09:35.805>has <00:09:36.225>happened.

165
00:09:37.355 --> 00:09:41.765
<00:09:37.355>Information <00:09:37.635>disclosure, <00:09:37.915>that <00:09:38.195>some <00:09:38.475>information <00:09:38.755>disclosed

166
00:09:41.865 --> 00:09:46.325
<00:09:41.865>and <00:09:42.145>exposed <00:09:42.425>to <00:09:42.705>unauthorized, <00:09:42.985>uh, <00:09:43.265>sources,

167
00:09:48.105 --> 00:09:52.685
<00:09:48.105>Daniel <00:09:48.260>of <00:09:48.416>service, <00:09:48.571>which <00:09:48.727>is <00:09:48.882>service <00:09:49.038>is <00:09:49.193>not, <00:09:49.349>uh, <00:09:49.505>available

168
00:09:54.625 --> 00:09:57.565
<00:09:54.625>for <00:09:54.905>user <00:09:55.185>and <00:09:55.465>elevation <00:09:55.745>of <00:09:56.025>privilege.

169
00:09:57.915 --> 00:10:01.005
<00:09:57.915>That <00:09:58.194>someone <00:09:58.474>get <00:09:58.755>access, <00:09:59.035>unauthorized <00:09:59.314>access

170
00:10:01.025 --> 00:10:03.925
<00:10:01.025>to <00:10:01.199>some <00:10:01.375>resources <00:10:01.550>that <00:10:01.725>we <00:10:01.900>don't <00:10:02.074>want <00:10:02.250>to <00:10:02.425>have.

171
00:10:06.355 --> 00:10:10.895
<00:10:06.355>But <00:10:06.510>what <00:10:06.666>is <00:10:06.821>their <00:10:06.977>right <00:10:07.132>workflow <00:10:07.288>for <00:10:07.443>implementing <00:10:07.599>a <00:10:07.755>strike?

172
00:10:11.395 --> 00:10:13.575
<00:10:11.395>We <00:10:11.595>have <00:10:11.795>to <00:10:11.995>follow <00:10:12.194>a <00:10:12.395>workflow <00:10:12.595>like <00:10:12.795>this,

173
00:10:13.955 --> 00:10:15.175
<00:10:13.955>not <00:10:14.321>exactly <00:10:14.687>this <00:10:15.053>one,

174
00:10:15.555 --> 00:10:18.255
<00:10:15.555>but <00:10:15.729>the <00:10:15.905>way <00:10:16.079>that <00:10:16.255>our, <00:10:16.430>that <00:10:16.604>we <00:10:16.780>are <00:10:16.954>taking

175
00:10:18.515 --> 00:10:21.695
<00:10:18.515>for <00:10:18.715>implementing <00:10:18.915>strike <00:10:19.115>is <00:10:19.314>something <00:10:19.515>similar <00:10:19.715>like <00:10:19.915>this.

176
00:10:22.235 --> 00:10:26.015
<00:10:22.235>We <00:10:22.410>are <00:10:22.585>starting <00:10:22.760>threat <00:10:22.935>modeling <00:10:23.110>by <00:10:23.285>building <00:10:23.460>a <00:10:23.635>representation

177
00:10:26.155 --> 00:10:29.655
<00:10:26.155>of <00:10:26.505>system <00:10:26.855>for <00:10:27.204>Stride <00:10:27.555>is

178
00:10:30.725 --> 00:10:32.095
<00:10:30.725>data <00:10:31.341>flow <00:10:31.958>diagrams

179
00:10:33.035 --> 00:10:37.175
<00:10:33.035>and <00:10:33.190>we <00:10:33.346>apply <00:10:33.501>strides <00:10:33.657>components, <00:10:33.812>the <00:10:33.968>six <00:10:34.123>component <00:10:34.279>on <00:10:34.435>that.

180
00:10:37.835 --> 00:10:42.415
<00:10:37.835>If <00:10:37.962>we <00:10:38.089>knew, <00:10:38.216>uh, <00:10:38.344>threat <00:10:38.471>identif, <00:10:38.598>if <00:10:38.725>we <00:10:38.853>identify <00:10:38.980>a <00:10:39.107>new <00:10:39.235>threat,

181
00:10:43.235 --> 00:10:45.415
<00:10:43.235>uh, <00:10:43.515>we <00:10:43.795>back <00:10:44.075>to <00:10:44.355>the <00:10:44.635>stride

182
00:10:45.475 --> 00:10:49.135
<00:10:45.475>and <00:10:45.602>try <00:10:45.729>to <00:10:45.856>apply <00:10:45.984>all <00:10:46.111>of <00:10:46.238>the <00:10:46.365>components <00:10:46.493>on <00:10:46.620>that <00:10:46.747>list <00:10:46.875>threats

183
00:10:50.435 --> 00:10:54.615
<00:10:50.435>ranked <00:10:50.635>by <00:10:50.834>criticality, <00:10:51.035>apply <00:10:51.234>mitigation <00:10:51.435>and <00:10:51.635>iterate <00:10:51.834>it.

184
00:10:58.995 --> 00:11:02.655
<00:10:58.995>And <00:10:59.150>remember <00:10:59.306>one <00:10:59.461>thing <00:10:59.617>here <00:10:59.772>that <00:10:59.928>threat <00:11:00.083>modeling <00:11:00.239>is <00:11:00.395>a

185
00:11:03.275 --> 00:11:06.335
<00:11:03.275>is <00:11:03.449>not <00:11:03.625>a <00:11:03.800>one, <00:11:03.975>one-time <00:11:04.150>task <00:11:04.324>is <00:11:04.500>a <00:11:04.675>process

186
00:11:06.915 --> 00:11:09.095
<00:11:06.915>and <00:11:07.070>it's <00:11:07.226>not <00:11:07.381>a <00:11:07.537>project <00:11:07.692>that <00:11:07.848>we <00:11:08.003>want <00:11:08.159>to <00:11:08.314>take.

187
00:11:09.125 --> 00:11:12.335
<00:11:09.125>It's <00:11:09.280>a <00:11:09.436>process <00:11:09.591>that <00:11:09.747>we <00:11:09.902>have <00:11:10.058>to <00:11:10.213>continuously <00:11:10.369>work <00:11:10.525>on

188
00:11:12.335 --> 00:11:13.815
<00:11:12.335>that <00:11:12.601>if <00:11:12.867>a <00:11:13.134>new <00:11:13.400>feature <00:11:13.667>coming.

189
00:11:13.915 --> 00:11:17.215
<00:11:13.915>So <00:11:14.042>we <00:11:14.169>need <00:11:14.296>to <00:11:14.424>have <00:11:14.551>a <00:11:14.678>new <00:11:14.805>threat <00:11:14.933>modeling <00:11:15.060>based <00:11:15.187>on <00:11:15.314>that.

190
00:11:17.795 --> 00:11:21.775
<00:11:17.795>But <00:11:17.950>since <00:11:18.106>we <00:11:18.261>mentioned <00:11:18.417>that <00:11:18.572>just <00:11:18.728>right <00:11:18.883>focusing <00:11:19.039>on <00:11:19.194>DFD

191
00:11:21.775 --> 00:11:25.535
<00:11:21.775>or <00:11:21.902>data <00:11:22.029>flow <00:11:22.156>D <00:11:22.284>grants, <00:11:22.411>we <00:11:22.538>have <00:11:22.665>to <00:11:22.793>know <00:11:22.920>this, <00:11:23.047>review <00:11:23.175>this,

192
00:11:25.535 --> 00:11:29.895
<00:11:25.535>these <00:11:25.768>four, <00:11:26.001>uh, <00:11:26.235>elements <00:11:26.468>of <00:11:26.701>DFD <00:11:26.935>process.

193
00:11:31.275 --> 00:11:35.335
<00:11:31.275>You, <00:11:31.402>you <00:11:31.529>will <00:11:31.656>see <00:11:31.784>this <00:11:31.911>symbol <00:11:32.038>in <00:11:32.165>our, <00:11:32.293>uh, <00:11:32.420>diagrams <00:11:32.547>in <00:11:32.675>the,

194
00:11:35.335 --> 00:11:38.615
<00:11:35.335>in <00:11:35.535>the <00:11:35.735>next <00:11:35.935>slide <00:11:36.135>process, <00:11:36.335>any <00:11:36.535>running <00:11:36.735>code

195
00:11:40.375 --> 00:11:43.795
<00:11:40.375>and <00:11:40.550>date <00:11:40.725>of <00:11:40.900>flow, <00:11:41.075>uh, <00:11:41.250>any <00:11:41.425>communication <00:11:41.600>between <00:11:41.775>elements,

196
00:11:45.015 --> 00:11:49.785
<00:11:45.015>data <00:11:45.189>store, <00:11:45.365>the <00:11:45.540>place <00:11:45.715>that <00:11:45.890>we <00:11:46.064>store <00:11:46.240>datas <00:11:46.415>database

197
00:11:49.965 --> 00:11:51.665
<00:11:49.965>or <00:11:50.665>S3 <00:11:51.365>buckets

198
00:11:51.685 --> 00:11:55.085
<00:11:51.685>or <00:11:51.812>any <00:11:51.939>type <00:11:52.066>of <00:11:52.194>storage <00:11:52.321>that <00:11:52.448>we <00:11:52.575>are <00:11:52.703>using <00:11:52.830>for <00:11:52.957>keeping <00:11:53.084>data.

199
00:11:56.225 --> 00:11:59.685
<00:11:56.225>And <00:11:56.458>the <00:11:56.691>last <00:11:56.925>one <00:11:57.158>is <00:11:57.391>external <00:11:57.625>entities,

200
00:12:02.185 --> 00:12:05.045
<00:12:02.185>people <00:12:02.359>or <00:12:02.535>code, <00:12:02.709>which <00:12:02.885>is <00:12:03.060>out <00:12:03.234>of <00:12:03.410>our <00:12:03.584>controls.

201
00:12:08.035 --> 00:12:11.815
<00:12:08.035>And <00:12:08.190>if <00:12:08.346>we, <00:12:08.501>if <00:12:08.657>we <00:12:08.812>want <00:12:08.968>to <00:12:09.123>combine <00:12:09.279>relation <00:12:09.435>between

202
00:12:12.915 --> 00:12:14.655
<00:12:12.915>six <00:12:13.381>components <00:12:13.848>of <00:12:14.314>stride

203
00:12:15.395 --> 00:12:19.135
<00:12:15.395>and <00:12:15.675>uh, <00:12:15.954>DFD <00:12:16.235>elements, <00:12:16.515>we <00:12:16.795>have

204
00:12:19.135 --> 00:12:20.455
<00:12:19.135>to <00:12:19.432>reach <00:12:19.729>to <00:12:20.026>this <00:12:20.323>table.

205
00:12:21.155 --> 00:12:24.055
<00:12:21.155>And <00:12:21.310>this <00:12:21.466>table <00:12:21.621>shows <00:12:21.777>us <00:12:21.932>that, <00:12:22.088>for <00:12:22.243>example, <00:12:22.399>for <00:12:22.555>process,

206
00:12:25.115 --> 00:12:27.175
<00:12:25.115>all <00:12:25.395>six <00:12:25.675>components <00:12:25.955>could <00:12:26.235>be <00:12:26.515>applied.

207
00:12:27.475 --> 00:12:31.815
<00:12:27.475>We <00:12:27.630>have <00:12:27.786>to <00:12:27.941>think <00:12:28.097>about <00:12:28.252>spoofing <00:12:28.408>for <00:12:28.563>a <00:12:28.719>process, <00:12:28.875>tampering

208
00:12:32.995 --> 00:12:37.695
<00:12:32.995>threat, <00:12:33.195>reputation, <00:12:33.395>information <00:12:33.595>disclosure, <00:12:33.795>D <00:12:33.995>and <00:12:34.195>of <00:12:34.395>service

209
00:12:38.195 --> 00:12:39.855
<00:12:38.195>and <00:12:38.661>evaluation <00:12:39.128>of <00:12:39.595>privilege.

210
00:12:40.315 --> 00:12:42.135
<00:12:40.315>For <00:12:40.515>date <00:12:40.715>of <00:12:40.915>law, <00:12:41.115>we <00:12:41.315>have <00:12:41.515>these <00:12:41.715>three.

211
00:12:42.395 --> 00:12:45.775
<00:12:42.395>And <00:12:42.550>for <00:12:42.706>data <00:12:42.861>store <00:12:43.017>is <00:12:43.172>for <00:12:43.328>and <00:12:43.483>for <00:12:43.639>external <00:12:43.795>entity.

212
00:12:45.865 --> 00:12:50.825
<00:12:45.865>These <00:12:46.331>three, <00:12:46.798>If <00:12:47.265>you

213
00:12:50.825 --> 00:12:55.025
<00:12:50.825>are, <00:12:50.965>if, <00:12:51.105>if <00:12:51.245>you <00:12:51.385>are <00:12:51.525>using <00:12:51.665>some, <00:12:51.805>some <00:12:51.945>tool <00:12:52.085>for, <00:12:52.225>uh,

214
00:12:55.025 --> 00:12:57.105
<00:12:55.025>threat <00:12:55.258>modeling, <00:12:55.491>you <00:12:55.725>can <00:12:55.958>see <00:12:56.191>that <00:12:56.425>some

215
00:12:57.105 --> 00:12:58.505
<00:12:57.105>of <00:12:57.525>this <00:12:57.945>option <00:12:58.365>unavailable.

216
00:12:58.685 --> 00:13:02.265
<00:12:58.685>And <00:12:58.824>this <00:12:58.964>is <00:12:59.104>based <00:12:59.244>on <00:12:59.385>its <00:12:59.525>table <00:12:59.665>that <00:12:59.805>when <00:12:59.944>you <00:13:00.084>see,

217
00:13:02.295 --> 00:13:05.145
<00:13:02.295>when <00:13:02.435>you <00:13:02.574>select <00:13:02.714>the <00:13:02.854>process <00:13:02.995>in <00:13:03.135>your <00:13:03.275>diagram, <00:13:03.415>you <00:13:03.555>can <00:13:03.694>see

218
00:13:05.145 --> 00:13:09.505
<00:13:05.145>that <00:13:05.272>it <00:13:05.399>shows <00:13:05.526>all <00:13:05.654>of <00:13:05.781>the, <00:13:05.908>all <00:13:06.035>of <00:13:06.163>the <00:13:06.290>components <00:13:06.417>of <00:13:06.545>strike.

219
00:13:09.765 --> 00:13:11.225
<00:13:09.765>But <00:13:09.984>for <00:13:10.203>example, <00:13:10.422>for <00:13:10.641>date <00:13:10.860>of <00:13:11.079>flow,

220
00:13:11.225 --> 00:13:12.425
<00:13:11.225>just <00:13:11.495>three <00:13:11.765>of <00:13:12.035>them <00:13:12.305>available.

221
00:13:14.285 --> 00:13:18.745
<00:13:14.285>But <00:13:14.459>for <00:13:14.635>addressing <00:13:14.810>each <00:13:14.985>thread, <00:13:15.160>we <00:13:15.334>have <00:13:15.510>four <00:13:15.685>options.

222
00:13:20.075 --> 00:13:21.295
<00:13:20.075>Do <00:13:20.231>you <00:13:20.388>know <00:13:20.545>what <00:13:20.702>is <00:13:20.859>the <00:13:21.016>first <00:13:21.173>one?

223
00:13:24.995 --> 00:13:26.455
<00:13:24.995>The <00:13:25.257>first <00:13:25.520>one <00:13:25.783>is <00:13:26.046>a <00:13:26.309>mitigation.

224
00:13:27.715 --> 00:13:31.495
<00:13:27.715>We <00:13:27.855>want <00:13:27.995>to <00:13:28.135>mitigate <00:13:28.275>the <00:13:28.415>risk <00:13:28.555>by <00:13:28.695>make <00:13:28.835>it <00:13:28.975>hard <00:13:29.115>to

225
00:13:32.485 --> 00:13:35.095
<00:13:32.485>exploit <00:13:32.765>that <00:13:33.045>vulnerability <00:13:33.325>or <00:13:33.605>do <00:13:33.885>that.

226
00:13:35.275 --> 00:13:38.895
<00:13:35.275>For <00:13:35.430>example, <00:13:35.586>if <00:13:35.741>we <00:13:35.897>have <00:13:36.052>a <00:13:36.208>simple <00:13:36.363>authentication <00:13:36.519>me <00:13:36.675>mechanism

227
00:13:38.995 --> 00:13:43.055
<00:13:38.995>and <00:13:39.135>you, <00:13:39.275>we <00:13:39.415>know <00:13:39.555>some <00:13:39.695>risks <00:13:39.835>behind <00:13:39.975>that, <00:13:40.115>we <00:13:40.255>are <00:13:40.395>switching

228
00:13:43.055 --> 00:13:46.895
<00:13:43.055>to <00:13:43.210>the <00:13:43.366>complex <00:13:43.521>one, <00:13:43.677>more <00:13:43.832>secure <00:13:43.988>one, <00:13:44.143>like <00:13:44.299>out <00:13:44.454>oat

229
00:13:46.955 --> 00:13:51.215
<00:13:46.955>or <00:13:47.305>other <00:13:47.655>solutions <00:13:48.005>eliminate <00:13:48.355>threats.

230
00:13:51.845 --> 00:13:55.295
<00:13:51.845>It's, <00:13:52.045>it's <00:13:52.245>fun, <00:13:52.445>but <00:13:52.645>it <00:13:52.845>it's <00:13:53.045>works <00:13:53.245>that

231
00:13:57.685 --> 00:14:00.635
<00:13:57.685>while <00:13:57.885>you <00:13:58.084>identify <00:13:58.285>a <00:13:58.484>threat <00:13:58.685>around <00:13:58.885>a <00:13:59.084>feature

232
00:14:01.655 --> 00:14:04.475
<00:14:01.655>at <00:14:01.888>the <00:14:02.121>end <00:14:02.355>you <00:14:02.588>decided <00:14:02.821>to <00:14:03.055>eliminate

233
00:14:04.475 --> 00:14:06.515
<00:14:04.475>that <00:14:04.825>feature, <00:14:05.175>remove <00:14:05.525>that <00:14:05.875>feature.

234
00:14:06.655 --> 00:14:08.235
<00:14:06.655>For <00:14:07.005>example, <00:14:07.355>sometimes <00:14:07.704>it's <00:14:08.055>working

235
00:14:08.265 --> 00:14:11.995
<00:14:08.265>because <00:14:08.498>if <00:14:08.731>you <00:14:08.965>have <00:14:09.198>a <00:14:09.431>admin <00:14:09.665>dashboard

236
00:14:12.415 --> 00:14:16.875
<00:14:12.415>and <00:14:12.570>you <00:14:12.726>have <00:14:12.881>some <00:14:13.037>threats <00:14:13.192>that <00:14:13.348>is <00:14:13.503>accessible <00:14:13.659>over <00:14:13.814>internet,

237
00:14:17.295 --> 00:14:20.835
<00:14:17.295>you <00:14:17.422>can <00:14:17.549>eliminate <00:14:17.676>some, <00:14:17.804>some <00:14:17.931>part <00:14:18.058>of <00:14:18.185>it <00:14:18.313>by <00:14:18.440>said <00:14:18.567>that, <00:14:18.694>okay,

238
00:14:21.185 --> 00:14:23.155
<00:14:21.185>this <00:14:21.464>dashboard <00:14:21.744>should <00:14:22.025>be <00:14:22.305>go <00:14:22.584>just

239
00:14:23.615 --> 00:14:25.995
<00:14:23.615>behind <00:14:23.790>the <00:14:23.965>IP <00:14:24.140>y <00:14:24.315>listing <00:14:24.490>or <00:14:24.665>things <00:14:24.840>like <00:14:25.015>that.

240
00:14:26.425 --> 00:14:28.955
<00:14:26.425>This <00:14:26.599>could <00:14:26.775>be <00:14:26.949>also, <00:14:27.125>uh, <00:14:27.300>an <00:14:27.474>option <00:14:27.650>for <00:14:27.824>elimination

241
00:14:30.735 --> 00:14:33.355
<00:14:30.735>And <00:14:30.968>transferring <00:14:31.201>the <00:14:31.435>risk, <00:14:31.668>transferring <00:14:31.901>the <00:14:32.135>threat

242
00:14:33.545 --> 00:14:36.595
<00:14:33.545>that <00:14:33.719>we <00:14:33.895>transfer <00:14:34.069>the <00:14:34.245>risk <00:14:34.420>to <00:14:34.594>the <00:14:34.770>third <00:14:34.944>party.

243
00:14:37.185 --> 00:14:39.595
<00:14:37.185>Like, <00:14:37.464>okay, <00:14:37.744>we <00:14:38.025>have <00:14:38.305>some <00:14:38.584>risk

244
00:14:39.615 --> 00:14:44.195
<00:14:39.615>around <00:14:39.848>authentication <00:14:40.081>mechanism <00:14:40.315>so <00:14:40.548>we, <00:14:40.781>uh, <00:14:41.015>transfer

245
00:14:44.255 --> 00:14:47.435
<00:14:44.255>or <00:14:44.455>risk <00:14:44.655>to <00:14:44.855>out <00:14:45.055>zero <00:14:45.255>or <00:14:45.455>other <00:14:45.655>Okta

246
00:14:47.495 --> 00:14:50.075
<00:14:47.495>or <00:14:47.845>any, <00:14:48.195>uh, <00:14:48.545>identity <00:14:48.895>providers.

247
00:14:52.545 --> 00:14:55.325
<00:14:52.545>And <00:14:52.700>the <00:14:52.856>last <00:14:53.011>one <00:14:53.167>that <00:14:53.322>you <00:14:53.478>cannot <00:14:53.633>show <00:14:53.789>it <00:14:53.944>there,

248
00:14:55.505 --> 00:14:57.325
<00:14:55.505>but <00:14:55.855>I <00:14:56.205>can <00:14:56.555>show, <00:14:56.905>but,

249
00:14:57.325 --> 00:15:02.045
<00:14:57.325>but <00:14:57.465>I <00:14:57.605>can <00:14:57.745>see <00:14:57.885>it <00:14:58.025>here, <00:14:58.165>uh, <00:14:58.305>is <00:14:58.445>accepting <00:14:58.585>the <00:14:58.725>risk,

250
00:15:02.175 --> 00:15:03.325
<00:15:02.175>which <00:15:02.433>is <00:15:02.692>the <00:15:02.951>last <00:15:03.210>one.

251
00:15:03.745 --> 00:15:06.565
<00:15:03.745>If <00:15:03.885>we <00:15:04.025>don't <00:15:04.165>have <00:15:04.305>any <00:15:04.445>other <00:15:04.585>option, <00:15:04.725>someone <00:15:04.865>in <00:15:05.005>the <00:15:05.145>company

252
00:15:06.625 --> 00:15:10.005
<00:15:06.625>and <00:15:06.800>it's <00:15:06.975>low, <00:15:07.150>someone <00:15:07.325>in <00:15:07.500>the <00:15:07.675>company <00:15:07.850>in <00:15:08.025>the,

253
00:15:10.025 --> 00:15:13.485
<00:15:10.025>in <00:15:10.165>the <00:15:10.305>higher <00:15:10.444>position <00:15:10.584>should <00:15:10.725>be <00:15:10.865>decided <00:15:11.005>to <00:15:11.145>go <00:15:11.285>for <00:15:11.425>that.

254
00:15:13.985 --> 00:15:18.005
<00:15:13.985>The <00:15:14.125>good <00:15:14.265>victim <00:15:14.405>for <00:15:14.545>accept <00:15:14.685>accepting <00:15:14.825>a <00:15:14.965>risk <00:15:15.105>is <00:15:15.245>the <00:15:15.385>head

255
00:15:18.005 --> 00:15:21.685
<00:15:18.005>of <00:15:18.180>marketing <00:15:18.355>because <00:15:18.530>you <00:15:18.705>know <00:15:18.880>that <00:15:19.055>marketing <00:15:19.230>always <00:15:19.405>try

256
00:15:21.685 --> 00:15:24.685
<00:15:21.685>to <00:15:21.859>push <00:15:22.035>product <00:15:22.209>into <00:15:22.385>the <00:15:22.560>production <00:15:22.734>in <00:15:22.910>any <00:15:23.084>way

257
00:15:25.145 --> 00:15:29.285
<00:15:25.145>and <00:15:25.300>you <00:15:25.456>cannot <00:15:25.611>convince <00:15:25.767>them, <00:15:25.922>okay, <00:15:26.078>it's <00:15:26.233>a, <00:15:26.389>uh, <00:15:26.545>box

258
00:15:29.285 --> 00:15:31.285
<00:15:29.285>of <00:15:29.518>vulnerability <00:15:29.751>that <00:15:29.985>we <00:15:30.218>want <00:15:30.451>to <00:15:30.685>push.

259
00:15:31.355 --> 00:15:33.725
<00:15:31.355>They <00:15:31.510>want <00:15:31.666>to <00:15:31.821>go <00:15:31.977>to <00:15:32.132>the <00:15:32.288>reach <00:15:32.443>to <00:15:32.599>the <00:15:32.755>campaign.

260
00:15:33.825 --> 00:15:38.495
<00:15:33.825>So <00:15:33.952>the <00:15:34.079>good, <00:15:34.206>uh, <00:15:34.334>victim <00:15:34.461>for <00:15:34.588>that <00:15:34.715>is, <00:15:34.843>uh, <00:15:34.970>head <00:15:35.097>of <00:15:35.225>marketing.

261
00:15:39.795 --> 00:15:41.775
<00:15:39.795>But <00:15:40.261>let's <00:15:40.728>see <00:15:41.194>a

262
00:15:41.775 --> 00:15:45.135
<00:15:41.775>demo <00:15:43.175>here.

263
00:15:45.195 --> 00:15:49.255
<00:15:45.195>We <00:15:45.322>have <00:15:45.449>a <00:15:45.576>level <00:15:45.704>zero <00:15:45.831>DFT, <00:15:45.958>uh, <00:15:46.085>date <00:15:46.213>of <00:15:46.340>flow <00:15:46.467>D <00:15:46.595>grant.

264
00:15:49.795 --> 00:15:53.095
<00:15:49.795>We <00:15:49.935>have, <00:15:50.074>we <00:15:50.214>have, <00:15:50.354>we <00:15:50.495>have <00:15:50.635>a <00:15:50.775>system <00:15:50.915>which <00:15:51.055>called <00:15:51.194>ticketing.

265
00:15:53.635 --> 00:15:56.975
<00:15:53.635>And <00:15:53.810>we <00:15:53.985>have <00:15:54.160>two <00:15:54.335>external <00:15:54.510>entities <00:15:54.685>which <00:15:54.860>are <00:15:55.035>admin

266
00:15:57.115 --> 00:15:58.575
<00:15:57.115>and <00:15:58.429>customer.

267
00:15:59.095 --> 00:16:04.015
<00:15:59.095>Customer <00:15:59.250>submit <00:15:59.406>a <00:15:59.561>request, <00:15:59.717>cancel <00:15:59.872>a <00:16:00.028>request, <00:16:00.183>get <00:16:00.339>a <00:16:00.495>response.

268
00:16:04.715 --> 00:16:09.545
<00:16:04.715>And <00:16:04.890>here <00:16:05.065>we <00:16:05.240>have <00:16:05.415>admin, <00:16:05.590>which <00:16:05.765>is <00:16:05.940>receive <00:16:06.115>notification,

269
00:16:09.805 --> 00:16:12.105
<00:16:09.805>accept <00:16:10.084>a <00:16:10.364>risk, <00:16:10.645>decline <00:16:10.925>a <00:16:11.204>request,

270
00:16:12.605 --> 00:16:16.465
<00:16:12.605>or <00:16:12.780>accept <00:16:12.955>a <00:16:13.130>request <00:16:13.305>decline <00:16:13.480>a <00:16:13.655>request <00:16:13.830>get <00:16:14.005>report.

271
00:16:17.445 --> 00:16:20.785
<00:16:17.445>But <00:16:17.552>this <00:16:17.660>is <00:16:17.768>a <00:16:17.875>really <00:16:17.983>high <00:16:18.091>level <00:16:18.198>if <00:16:18.306>you <00:16:18.414>are, <00:16:18.521>if <00:16:18.629>you <00:16:18.737>wanna <00:16:18.845>go

272
00:16:21.445 --> 00:16:25.865
<00:16:21.445>deeper, <00:16:21.600>we <00:16:21.756>have <00:16:21.911>level <00:16:22.067>one, <00:16:22.222>which <00:16:22.378>is <00:16:22.533>something <00:16:22.689>like <00:16:22.845>this

273
00:16:26.615 --> 00:16:31.385
<00:16:26.615>that <00:16:26.790>we <00:16:26.965>Can <00:16:27.140>see <00:16:27.315>more <00:16:27.490>components <00:16:27.665>and <00:16:27.840>more <00:16:28.015>process.

274
00:16:31.535 --> 00:16:33.225
<00:16:31.535>Here <00:16:31.814>we <00:16:32.094>have <00:16:32.375>a <00:16:32.655>front <00:16:32.935>end,

275
00:16:33.235 --> 00:16:35.065
<00:16:33.235>which <00:16:33.515>is <00:16:33.795>serve <00:16:34.075>service <00:16:34.355>to <00:16:34.635>customer.

276
00:16:35.685 --> 00:16:37.985
<00:16:35.685>And <00:16:35.840>we <00:16:35.996>have <00:16:36.151>an <00:16:36.307>admin <00:16:36.462>dashboard, <00:16:36.618>which <00:16:36.773>is <00:16:36.929>serve <00:16:37.084>service

277
00:16:38.125 --> 00:16:41.345
<00:16:38.125>to <00:16:38.265>the <00:16:38.405>admin <00:16:38.545>and <00:16:38.685>backend <00:16:38.825>one, <00:16:38.965>which <00:16:39.105>is <00:16:39.245>connected <00:16:39.385>to <00:16:39.525>both

278
00:16:41.405 --> 00:16:42.945
<00:16:41.405>of <00:16:41.751>them <00:16:42.098>and <00:16:42.444>database <00:16:42.791>layer.

279
00:16:44.965 --> 00:16:47.425
<00:16:44.965>But <00:16:45.140>in <00:16:45.315>DFT <00:16:45.490>level <00:16:45.665>two, <00:16:45.840>we <00:16:46.015>have <00:16:46.190>more <00:16:46.365>details.

280
00:16:48.325 --> 00:16:50.145
<00:16:48.325>We <00:16:48.675>have <00:16:49.025>front <00:16:49.375>end <00:16:49.725>application

281
00:16:50.685 --> 00:16:54.185
<00:16:50.685>and <00:16:51.151>instead <00:16:51.618>of <00:16:52.084>backend

282
00:16:54.255 --> 00:16:58.665
<00:16:54.255>that <00:16:54.395>we <00:16:54.535>had <00:16:54.675>in <00:16:54.814>the <00:16:54.955>previous <00:16:55.095>slide, <00:16:55.235>we <00:16:55.375>have <00:16:55.515>three <00:16:55.655>components,

283
00:16:58.755 --> 00:17:02.305
<00:16:58.755>which <00:16:58.988>TV <00:16:59.221>process, <00:16:59.455>which <00:16:59.688>are <00:16:59.921>ticket <00:17:00.155>management,

284
00:17:02.545 --> 00:17:04.665
<00:17:02.545>notification <00:17:03.245>center <00:17:03.944>reporting,

285
00:17:04.885 --> 00:17:07.545
<00:17:04.885>and <00:17:05.351>application <00:17:05.818>database <00:17:06.285>unlocks.

286
00:17:08.825 --> 00:17:13.645
<00:17:08.825>So <00:17:09.291>A <00:17:09.758>step <00:17:10.225>zero

287
00:17:13.645 --> 00:17:15.365
<00:17:13.645>of <00:17:13.845>threat <00:17:14.045>modeling <00:17:14.244>will <00:17:14.444>be <00:17:14.645>a <00:17:14.845>start <00:17:15.045>here.

288
00:17:15.905 --> 00:17:19.725
<00:17:15.905>The <00:17:16.105>first <00:17:16.305>step, <00:17:16.504>uh, <00:17:16.704>on <00:17:16.905>threat <00:17:17.105>modeling <00:17:17.305>is

289
00:17:20.245 --> 00:17:22.765
<00:17:20.244>defining <00:17:20.524>trust <00:17:20.804>boundaries, <00:17:21.084>how <00:17:21.364>we <00:17:21.645>want

290
00:17:22.825 --> 00:17:25.085
<00:17:22.825>to <00:17:23.175>define <00:17:23.525>our <00:17:23.875>trust <00:17:24.225>boundaries.

291
00:17:25.585 --> 00:17:29.165
<00:17:25.585>And <00:17:25.740>as <00:17:25.896>you <00:17:26.051>can <00:17:26.207>see, <00:17:26.362>we <00:17:26.518>have <00:17:26.673>here <00:17:26.829>four <00:17:26.985>trust,

292
00:17:29.435 --> 00:17:31.885
<00:17:29.435>four <00:17:29.668>different <00:17:29.901>trust <00:17:30.135>boundaries <00:17:30.368>for <00:17:30.601>front <00:17:30.835>end

293
00:17:31.985 --> 00:17:34.445
<00:17:31.985>and, <00:17:32.264>uh, <00:17:32.544>for <00:17:32.824>admin <00:17:33.104>dashboard <00:17:33.385>one,

294
00:17:35.505 --> 00:17:38.125
<00:17:35.505>of <00:17:35.660>course <00:17:35.816>we <00:17:35.971>can <00:17:36.127>split <00:17:36.282>this <00:17:36.438>if <00:17:36.593>we <00:17:36.749>want <00:17:36.905>to,

295
00:17:38.225 --> 00:17:39.445
<00:17:38.225>uh, <00:17:38.591>keep <00:17:38.956>them <00:17:39.322>separate.

296
00:17:40.505 --> 00:17:42.405
<00:17:40.505>We <00:17:40.785>have <00:17:41.065>a <00:17:41.345>backend <00:17:41.625>trust <00:17:41.905>boundary

297
00:17:42.425 --> 00:17:46.445
<00:17:42.425>and <00:17:42.600>inside <00:17:42.774>backend <00:17:42.950>we <00:17:43.125>split <00:17:43.300>it <00:17:43.475>to <00:17:43.649>application <00:17:43.825>site

298
00:17:46.465 --> 00:17:47.525
<00:17:46.465>and <00:17:46.942>database <00:17:47.419>site.

299
00:17:49.345 --> 00:17:53.125
<00:17:49.345>It <00:17:49.545>completely <00:17:49.745>depends <00:17:49.945>on <00:17:50.145>your <00:17:50.345>organization, <00:17:50.545>your <00:17:50.745>decision

300
00:17:53.305 --> 00:17:57.565
<00:17:53.305>and <00:17:53.505>your, <00:17:53.705>uh, <00:17:53.905>industry <00:17:54.105>that <00:17:54.305>your <00:17:54.505>companies <00:17:54.705>work.

301
00:17:57.745 --> 00:18:01.725
<00:17:57.745>If <00:17:57.872>a <00:17:57.999>fi <00:17:58.126>uh, <00:17:58.254>if <00:17:58.381>you <00:17:58.508>are <00:17:58.635>working <00:17:58.763>in <00:17:58.890>a <00:17:59.017>financial <00:17:59.145>sector,

302
00:18:01.865 --> 00:18:03.525
<00:18:01.865>you <00:18:02.098>have <00:18:02.331>to <00:18:02.565>more <00:18:02.798>restrict <00:18:03.031>about <00:18:03.265>that.

303
00:18:07.045 --> 00:18:11.025
<00:18:07.045>And <00:18:07.220>here <00:18:07.395>we <00:18:07.570>are <00:18:07.745>starting <00:18:07.920>to <00:18:08.095>step <00:18:08.270>one <00:18:08.445>onward

304
00:18:11.335 --> 00:18:14.065
<00:18:11.335>that <00:18:11.568>I'm <00:18:11.801>using <00:18:12.035>a <00:18:12.268>tool <00:18:12.501>which <00:18:12.735>called

305
00:18:14.405 --> 00:18:16.385
<00:18:14.405>OAS <00:18:15.105>Threat <00:18:15.805>Dragon.

306
00:18:16.725 --> 00:18:19.105
<00:18:16.725>And <00:18:16.925>this <00:18:17.125>is <00:18:17.324>the <00:18:17.524>logo <00:18:17.725>of <00:18:17.925>that <00:18:18.125>product.

307
00:18:19.725 --> 00:18:22.545
<00:18:19.725>And <00:18:19.841>this <00:18:19.958>is <00:18:20.074>a <00:18:20.191>tool, <00:18:20.308>that <00:18:20.425>open <00:18:20.541>source <00:18:20.658>tool <00:18:20.774>that <00:18:20.891>helps <00:18:21.008>you <00:18:21.125>for

308
00:18:23.175 --> 00:18:25.545
<00:18:23.175>preparing <00:18:23.350>all <00:18:23.524>of <00:18:23.700>the <00:18:23.875>threat <00:18:24.050>modeling <00:18:24.225>that <00:18:24.399>you <00:18:24.575>have.

309
00:18:26.125 --> 00:18:30.345
<00:18:26.125>The <00:18:26.265>DFD <00:18:26.405>diagram <00:18:26.545>that <00:18:26.685>I <00:18:26.825>had, <00:18:26.965>it's <00:18:27.105>turned <00:18:27.245>to <00:18:27.385>this, <00:18:27.525>uh,

310
00:18:30.495 --> 00:18:34.225
<00:18:30.495>application <00:18:30.774>as <00:18:31.054>a, <00:18:31.334>as <00:18:31.614>a, <00:18:31.895>uh,

311
00:18:34.695 --> 00:18:38.545
<00:18:34.695>data <00:18:34.850>flow <00:18:35.006>diagram <00:18:35.161>that <00:18:35.317>I <00:18:35.472>have <00:18:35.628>and <00:18:35.783>define <00:18:35.939>trust <00:18:36.095>boundaries

312
00:18:38.565 --> 00:18:43.395
<00:18:38.565>and <00:18:38.798>try <00:18:39.031>to, <00:18:39.265>uh, <00:18:39.498>identify <00:18:39.731>threats <00:18:39.965>pair,

313
00:18:44.415 --> 00:18:45.995
<00:18:44.415>uh, <00:18:44.695>elements <00:18:44.975>that <00:18:45.254>I <00:18:45.534>have <00:18:45.815>here.

314
00:18:47.415 --> 00:18:50.195
<00:18:47.415>So <00:18:47.542>we <00:18:47.669>have <00:18:47.796>to <00:18:47.924>do <00:18:48.051>it <00:18:48.178>for <00:18:48.305>all <00:18:48.433>components <00:18:48.560>that <00:18:48.687>we <00:18:48.815>have.

315
00:18:52.535 --> 00:18:54.195
<00:18:52.535>And <00:18:52.768>as, <00:18:53.001>as <00:18:53.235>we <00:18:53.468>can <00:18:53.701>see <00:18:53.935>here

316
00:18:54.255 --> 00:18:57.795
<00:18:54.255>and <00:18:54.410>as <00:18:54.566>a <00:18:54.721>as <00:18:54.877>example, <00:18:55.032>uh, <00:18:55.188>for <00:18:55.343>admin <00:18:55.499>dashboard <00:18:55.655>process,

317
00:18:58.455 --> 00:19:02.755
<00:18:58.455>we <00:18:58.610>have, <00:18:58.766>uh, <00:18:58.921>for, <00:18:59.077>we <00:18:59.232>identify <00:18:59.388>four <00:18:59.543>different, <00:18:59.699>uh, <00:18:59.855>threats,

318
00:19:03.815 --> 00:19:08.635
<00:19:03.815>um, <00:19:04.015>such <00:19:04.215>as <00:19:04.415>elevation <00:19:04.615>of <00:19:04.815>privilege, <00:19:05.015>reputation, <00:19:05.215>reputation,

319
00:19:08.735 --> 00:19:10.315
<00:19:08.735>and <00:19:08.968>a <00:19:09.201>spoofing <00:19:09.435>in <00:19:09.668>a <00:19:09.901>different <00:19:10.135>sector.

320
00:19:11.135 --> 00:19:14.515
<00:19:11.135>And, <00:19:11.485>uh, <00:19:11.835>we <00:19:12.185>didn't, <00:19:12.535>uh,

321
00:19:14.665 --> 00:19:17.035
<00:19:14.665>provide <00:19:14.945>any <00:19:15.225>mitigation <00:19:15.504>plan <00:19:15.784>for <00:19:16.065>them.

322
00:19:17.305 --> 00:19:18.555
<00:19:17.305>This, <00:19:17.586>this <00:19:17.867>icon <00:19:18.148>shows <00:19:18.430>you

323
00:19:18.555 --> 00:19:20.235
<00:19:18.555>that <00:19:18.755>we <00:19:18.955>don't <00:19:19.155>have <00:19:19.355>any <00:19:19.555>mitigation <00:19:19.755>for <00:19:19.955>them.

324
00:19:21.655 --> 00:19:26.195
<00:19:21.655>And <00:19:21.830>similarly <00:19:22.004>for <00:19:22.180>front <00:19:22.355>end <00:19:22.530>application, <00:19:22.705>we <00:19:22.879>did <00:19:23.055>same.

325
00:19:26.815 --> 00:19:30.715
<00:19:26.815>But <00:19:26.931>for <00:19:27.048>the <00:19:27.165>front <00:19:27.281>end <00:19:27.398>you <00:19:27.515>can <00:19:27.631>see <00:19:27.748>we <00:19:27.865>have <00:19:27.981>this <00:19:28.098>green <00:19:28.215>check,

326
00:19:31.535 --> 00:19:34.715
<00:19:31.535>uh, <00:19:31.710>that <00:19:31.885>shows <00:19:32.060>us <00:19:32.235>that <00:19:32.410>mitigation <00:19:32.585>plan <00:19:32.760>is <00:19:32.935>ready.

327
00:19:34.855 --> 00:19:37.435
<00:19:34.855>For <00:19:35.135>example, <00:19:35.415>we <00:19:35.695>identify <00:19:35.975>this <00:19:36.255>threat,

328
00:19:38.295 --> 00:19:41.075
<00:19:38.295>normal <00:19:38.645>user <00:19:38.995>gaining <00:19:39.345>admin <00:19:39.695>privilege

329
00:19:41.495 --> 00:19:43.835
<00:19:41.495>and <00:19:42.195>we <00:19:42.895>implement,

330
00:19:44.055 --> 00:19:45.955
<00:19:44.055>we <00:19:44.255>have <00:19:44.455>a <00:19:44.655>mitigation <00:19:44.855>for <00:19:45.055>that, <00:19:45.255>for <00:19:45.455>example.

331
00:19:46.065 --> 00:19:47.835
<00:19:46.065>Good, <00:19:46.415>uh, <00:19:46.765>level <00:19:47.115>of, <00:19:47.465>uh,

332
00:19:48.165 --> 00:19:50.915
<00:19:48.165>role-based <00:19:48.398>access <00:19:48.631>control <00:19:48.865>implementation <00:19:49.098>that <00:19:49.331>we <00:19:49.565>have

333
00:19:51.975 --> 00:19:54.795
<00:19:51.975>or <00:19:52.208>for <00:19:52.441>example <00:19:52.675>for <00:19:52.908>reputation <00:19:53.141>or <00:19:53.375>excesses

334
00:19:54.855 --> 00:19:56.355
<00:19:54.855>or <00:19:55.192>this <00:19:55.530>type <00:19:55.867>of <00:19:56.205>vulnerabilities.

335
00:19:58.615 --> 00:19:59.795
<00:19:58.615>We <00:19:58.880>define <00:19:59.146>all <00:19:59.411>of <00:19:59.677>this.

336
00:20:00.135 --> 00:20:04.755
<00:20:00.135>And <00:20:00.290>o <00:20:00.446>as <00:20:00.601>threat <00:20:00.757>dragon <00:20:00.912>also <00:20:01.068>at <00:20:01.223>the <00:20:01.379>end, <00:20:01.535>uh,

337
00:20:05.115 --> 00:20:06.635
<00:20:05.115>generates <00:20:05.388>a <00:20:05.662>good <00:20:05.935>report <00:20:06.209>for <00:20:06.483>you

338
00:20:06.975 --> 00:20:08.875
<00:20:06.975>and <00:20:07.175>see <00:20:07.375>you <00:20:07.574>overall <00:20:07.774>things <00:20:07.975>that <00:20:08.175>you <00:20:08.375>need.

339
00:20:09.215 --> 00:20:12.475
<00:20:09.215>And <00:20:09.355>as <00:20:09.495>I <00:20:09.635>mentioned <00:20:09.774>that <00:20:09.915>uh, <00:20:10.054>threat <00:20:10.195>modeling <00:20:10.334>is <00:20:10.475>a <00:20:10.615>process

340
00:20:12.695 --> 00:20:15.075
<00:20:12.695>and <00:20:12.850>not <00:20:13.006>one <00:20:13.161>time <00:20:13.317>task <00:20:13.472>that <00:20:13.628>you <00:20:13.783>want <00:20:13.939>to <00:20:14.095>do.

341
00:20:15.735 --> 00:20:19.395
<00:20:15.735>Uh, <00:20:15.862>you <00:20:15.989>can <00:20:16.116>keep <00:20:16.244>tracks <00:20:16.371>all <00:20:16.498>of <00:20:16.625>the, <00:20:16.753>all <00:20:16.880>of <00:20:17.007>the <00:20:17.135>activities

342
00:20:19.395 --> 00:20:21.515
<00:20:19.395>that <00:20:19.570>you <00:20:19.745>did <00:20:19.920>around <00:20:20.095>threat <00:20:20.270>modeling <00:20:20.445>with <00:20:20.620>this <00:20:20.795>tool.

343
00:20:21.695 --> 00:20:23.235
<00:20:21.695>Of <00:20:21.972>course <00:20:22.249>a <00:20:22.526>lot <00:20:22.803>of <00:20:23.081>commercial

344
00:20:23.655 --> 00:20:26.555
<00:20:23.655>and <00:20:23.855>uh, <00:20:24.055>other <00:20:24.254>tools <00:20:24.455>available <00:20:24.655>in <00:20:24.855>the <00:20:25.055>market.

345
00:20:26.775 --> 00:20:28.555
<00:20:26.775>But <00:20:26.975>if <00:20:27.175>I <00:20:27.375>want <00:20:27.575>to <00:20:27.775>go <00:20:27.975>with <00:20:28.175>the

346
00:20:30.315 --> 00:20:34.045
<00:20:30.315>less <00:20:30.470>pain <00:20:30.626>open <00:20:30.781>source <00:20:30.937>solution, <00:20:31.092>I <00:20:31.248>will <00:20:31.403>go <00:20:31.559>with <00:20:31.715>that.

347
00:20:34.275 --> 00:20:36.845
<00:20:34.275>Another <00:20:34.475>one <00:20:34.675>is <00:20:34.875>arao <00:20:35.075>that <00:20:35.275>you <00:20:35.475>can <00:20:35.675>use,

348
00:20:36.985 --> 00:20:41.205
<00:20:36.985>but <00:20:37.185>that <00:20:37.385>is <00:20:37.584>a <00:20:37.784>little <00:20:37.985>bit <00:20:38.185>painful <00:20:38.385>for,

349
00:20:41.305 --> 00:20:44.565
<00:20:41.305>for <00:20:41.432>working <00:20:41.559>with <00:20:41.686>that <00:20:41.814>and <00:20:41.941>try <00:20:42.068>to <00:20:42.195>keep <00:20:42.323>all <00:20:42.450>of <00:20:42.577>the <00:20:42.705>information

350
00:20:44.565 --> 00:20:48.325
<00:20:44.565>because <00:20:44.705>as <00:20:44.845>you <00:20:44.985>know, <00:20:45.125>he <00:20:45.265>said <00:20:45.405>an <00:20:45.545>illustrator <00:20:45.685>tools <00:20:45.825>not, <00:20:45.965>uh,

351
00:20:49.395 --> 00:20:51.365
<00:20:49.395>doesn't <00:20:49.595>have <00:20:49.795>any <00:20:49.995>database <00:20:50.195>or <00:20:50.395>things <00:20:50.595>like <00:20:50.795>that.

352
00:20:53.385 --> 00:20:56.885
<00:20:53.385>And <00:20:53.618>if <00:20:53.851>I <00:20:54.085>can, <00:20:54.318>it's <00:20:54.551>already <00:20:54.785>zero.

353
00:20:57.345 --> 00:21:01.125
<00:20:57.345>If <00:20:57.461>I <00:20:57.578>can <00:20:57.695>get, <00:20:57.811>if <00:20:57.928>I <00:20:58.045>want <00:20:58.161>to <00:20:58.278>give <00:20:58.395>you <00:20:58.511>some <00:20:58.628>references <00:20:58.745>for

354
00:21:01.125 --> 00:21:05.885
<00:21:01.125>and <00:21:01.265>read <00:21:01.405>mores, <00:21:01.545>uh, <00:21:01.685>two <00:21:01.825>really <00:21:01.965>good <00:21:02.105>books <00:21:02.245>on <00:21:02.385>threat <00:21:02.525>modeling

355
00:21:07.745 --> 00:21:11.045
<00:21:07.745>and <00:21:07.919>uh, <00:21:08.094>some <00:21:08.270>useful <00:21:08.445>links <00:21:08.620>that <00:21:08.794>you <00:21:08.969>can <00:21:09.145>see.

356
00:21:11.545 --> 00:21:14.325
<00:21:11.545>And <00:21:11.745>I <00:21:11.945>really <00:21:12.145>recommend <00:21:12.345>you, <00:21:12.545>if <00:21:12.745>you <00:21:12.945>want

357
00:21:14.345 --> 00:21:17.645
<00:21:14.345>to <00:21:14.545>see <00:21:14.745>a <00:21:14.945>good <00:21:15.145>example <00:21:15.345>of <00:21:15.545>uh, <00:21:15.745>implementation,

358
00:21:17.995 --> 00:21:21.365
<00:21:17.995>full <00:21:18.169>implementation <00:21:18.344>of <00:21:18.520>threat <00:21:18.695>modeling, <00:21:18.870>go <00:21:19.044>to <00:21:19.219>this, <00:21:19.395>uh,

359
00:21:22.705 --> 00:21:23.725
<00:21:22.705>GitHub <00:21:23.622>repository

360
00:21:23.865 --> 00:21:26.845
<00:21:23.865>and <00:21:24.020>see <00:21:24.176>a <00:21:24.331>lot <00:21:24.487>of <00:21:24.642>information <00:21:24.798>that <00:21:24.953>they <00:21:25.109>have <00:21:25.265>there.

361
00:21:27.705 --> 00:21:27.925
And

362
00:21:28.995 --> 00:21:33.225
<00:21:28.995>yeah, <00:21:29.695>thank <00:21:30.395>you.

363
00:21:40.605 --> 00:21:43.785
<00:21:40.605>And <00:21:40.780>uh, <00:21:40.955>in <00:21:41.130>addition, <00:21:41.305>I <00:21:41.480>will, <00:21:41.655>uh, <00:21:41.830>upload <00:21:42.005>all

364
00:21:43.785 --> 00:21:48.425
<00:21:43.785>of <00:21:43.925>the <00:21:44.065>slides <00:21:44.205>into <00:21:44.345>the <00:21:44.485>my <00:21:44.625>personal <00:21:44.765>blog, <00:21:44.905>which <00:21:45.045>is <00:21:45.185>here

365
00:21:48.925 --> 00:21:50.585
<00:21:48.925>and <00:21:49.205>you <00:21:49.485>will <00:21:49.764>can <00:21:50.044>access <00:21:50.325>it.

366
00:21:50.935 --> 00:21:52.025
<00:21:50.935>Amazing. <00:21:51.262>Thank <00:21:51.589>you <00:21:51.916>so.