Before the Breach: Threat Modeling Enhances Cloud Resilience

Discover how to strengthen cloud security through proactive threat modeling in this 21-minute conference talk from the Threats & Vulnerabilities Summit 2025. Explore structured approaches to identifying vulnerabilities before exploitation as Kavitha Bangalore, Cybersecurity Analyst at Cleveland Clinic, demonstrates how to anticipate risks and prioritize mitigations in cloud environments. Learn practical techniques for integrating threat modeling into DevSecOps workflows, applying frameworks like STRIDE and MITRE ATT&CK for comprehensive analysis, and addressing compliance requirements including GDPR, PCI DSS, HIPAA, and OWASP Top 10. Gain insights into making risk-based decisions that enhance cloud resilience as organizations face expanding attack surfaces due to accelerated cloud adoption. The session connects to Cloud Security Alliance's broader resources, including their Top Threats to Cloud Computing 2024 Report, research publications, AI Safety Initiative, online training programs, and opportunities to contribute as a research volunteer.