Threat Modeling the Death Star
summary
Argues that attack trees make threat modeling concrete and engaging by enumerating attacker personas, branching real attack paths and deriving mitigations; builds a Death Star tree that surfaces three decisive risks — privileged internal access, a military fleet strike, and the tiny thermal port exploit — and recommends specific controls: network segregation, zero‑trust access, pen tests and incident response. Uses surprising scale details (20 years, two trillion credits, two million crew) to justify feasibility and prioritisation.
AI-written summary · about
chapters (7)
- 0:00Start
- 1:48STRIDE
- 8:50Goals
- 15:35Privilege access to network
- 17:04Military attack
- 18:51Shoot at thermal port
- 23:18Attack Trees
related talks
37mThreat Modelling: Star Wars Edition
01h 00mThreat Modeling for Secure Software Design
57mUnlocking Threat Modeling
33mDecoding Cyber Threats: A Practical Guide to Using Attack Trees
52mLessons From The Threat Modeling Trenches
49mThreat Modeling Toolkit
49mThreat Modeling Panel
38mThreat Modelling Kubernetes: A Lightspeed Introduction