Modeling threats: small children and pets can teach you (almost) everything you need
summary
Parents and pet owners learn to map real incidents to software threats using STRIDE so they lock laptops to prevent accidental rm -rf or rogue emails (spoofing and repudiation), hide matches and keys to prevent elevation of privilege, stop kids from announcing secrets to teach information disclosure, and expect dogs to chew power cords as a form of denial of service. The talk claims these everyday checks form an effective, transferable threat model for apps, pipelines and IaC.
AI-written summary · about
related talks
01h 00mThreat Modeling for Secure Software Design
53mThreat Modeling: uncover vulnerabilities without looking at code
43mThreat modeling
46mThreat modeling is on the rise
29mThreat Modeling Meets Model Training: Web App Security Skills...
25mThreat Modeling for AI Apps with Attacks as Code
52mLessons From The Threat Modeling Trenches
41mThreat Modelling for ML/AI systems