Bringing Rapid Prototyping to the Threat Model Process

This course introduces Rapid Threat Model Prototyping, a just-in-time process for quickly modeling software designs, identifying high-threat areas, and applying mitigations. It focuses on data-flow diagrams and automated threat-analysis workflows for Agile and DevOps environments.

Syllabus

Introduction
Who am I
How projects go nuclear
Visa
What Should Threat Modeling Do
Flaws vs Bugs
Solution Design
Security Framework
Mitigations
Dataflow Diagrams
The Final Sprint
Emergent Design
Open Sam
Rapid Prototype
Rapid Prototyping
Planning
Data Flow Diagram
Project Overview
Elevation of Privilege
Sprint Zero
Example
Defense
Rule of Thumb
Ranking Components
Create
Rules
Zone Math
State Case
Mitigation Patterns