Rethinking Threat Modeling for Dev Teams - A Scalable Approach

Learn how to implement scalable threat modeling practices specifically designed for development teams in this 25-minute conference talk from the OWASP Foundation. Discover innovative approaches to integrate security thinking into development workflows without overwhelming team resources or slowing down delivery cycles. Explore practical methodologies that make threat modeling accessible to developers who may not have extensive security backgrounds, while maintaining the rigor needed to identify and mitigate real security risks. Gain insights into streamlining threat modeling processes to fit within agile development cycles, including techniques for automating portions of the threat identification process and creating reusable threat models for common application patterns. Understand how to balance thoroughness with practicality when conducting threat assessments at scale, and learn strategies for building security awareness within development teams through collaborative threat modeling exercises.