Application Threat Modeling Implementation Tips and Tricks

This talk covers practical application threat modeling, including data flow diagrams for microservices and client-side applications. It also discusses threat identification, threat agents, traceability, and risk analysis.

Syllabus

Introduction
Selection of Methodology
Application Threat Modeling Frameworks
Application Threat Modeling Scope
Asset Identification
Application Architecture
Communication
Data Flow Diagram
Web Application Data
Client Side Code
Connection Flow
Logical Flow
Dataflow Diagram
Threat Identification
Threat Libraries
Continuous Threat Modeling
Stride
Tips
Thread Traceability
Understanding Threat Agents
Risk Analysis