Loading…
Attending this event?
Saturday, March 28 • 10:30am - 11:30am
Look! There’s a Threat Model in My DevOps

Sign up or log in to save this to your schedule and see who's attending!

Log in to leave feedback.
What if I told you that you can threat model in an Agile or even a CI/CD DevOps environment and that I’m not pitching some automated tool? When developers and security professionals alike think about threat modeling, all too often they become obsessed with frameworks like STRIDE, DREAD, PASTA, etc. Threat modeling is predominantly viewed as a heavy-weight, time-consuming exercise that is simply not compatible with high-paced development paradigms. As a result, organizations that employ these paradigms commonly scratch threat modeling off their Secure SDLC checklist as simply impossible to implement without breaking their DevOps model. They lose sight of the core purpose of threat modeling and as a result are unable to tailor an approach that fits their development lifecycle.
In this session, we’ll turn those misconceptions about Threat Modeling upside down. We’ll go back to the core purpose of threat modeling. We’ll discuss what components of threat modeling are most crucial, what questions we should be asking and who should be answering them. Ultimately, this will all culminate into presentation of an alternative approach to Threat Modeling. We’ll walk through the details of how to implement this backlog-based approach in any development paradigm and demonstrate that it can be done without affecting our development timelines.

https://zoom.us/j/711704515

Speakers
avatar for Alyssa Miller

Alyssa Miller

Application Security Advocate, Snyk
Alyssa Miller (CISM) is a hacker, security advocate, author, professional, and public speaker with almost 15 years of experience in the security industry. She has always had a passion for deconstructing technology, particularly since buying her first computer at the age of 12 teaching... Read More →


Saturday March 28, 2020 10:30am - 11:30am
'Protect' track 3333 Busbee Dr NW, Kennesaw, GA 30144, USA