It starts and ends with you
summary
Argues that threat modeling is the concrete decision tool that turns vague security hopes into prioritized actions, using automation to surface where controls actually change attacker impact and developer velocity, ties every control to measurable business impact (reduce breach likelihood, avoid front‑page compromises, or speed development), shows security choices as explicit trade‑offs against latency, cost, and usability, and frames success as an accepted level of risk rather than absolute elimination.
AI-written summary · about
chapters (6)
- 0:00Start
- 0:37Security should always come with purpose and intent
- 1:01Security should be driven by impact
- 1:26Good design is a complicated series of compromises
- 1:52Part of the balance is understanding when and where to apply what controls
- 2:24Threat modeling is the vehicle that gets you there
related talks
52mLessons From The Threat Modeling Trenches
48mLevel Up Your Security Mindset
44mImproving Cyber Risk Management with Threat Modeling
39mAgilifying Threat Modeling in Development Teams
01h 01mImprove your threat modelling through the science of simplicity
24mSecurity by default
45mA door with no locks? Let’s talk about threat modeling
50mMoving Security Architecture from Art to Engineering