Threat Modeling - Uncover Vulnerabilities Without Looking at Code

Threat Modeling - Uncover Vulnerabilities Without Looking at Code

Explore the fundamentals of threat modeling in this 53-minute conference talk from NDC Conferences. Learn how to analyze application security and uncover vulnerabilities before writing code. Discover the process of creating simple data flow diagrams, using STRIDE to identify security threats, and mitigating potential issues. Survey available threat modeling tools for organizational use. Participate in hands-on threat modeling exercises using whiteboards in small teams, and share findings with fellow attendees. Gain valuable insights into this essential security skill that empowers developers to proactively address security concerns during the design phase.