Threat Modeling for Observability - From Blind Spots to Actionable Insight

Learn to identify and mitigate security vulnerabilities in observability systems through systematic threat modeling in this 14-minute conference talk from Conf42 Observability 2025. Explore the security blind spots that exist within traditional observability frameworks and understand how threat actors can exploit observability pipelines to compromise system integrity. Discover the motivations behind attacks on monitoring infrastructure and examine the various attack surfaces present in modern observability architectures. Master the application of the STRIDE threat modeling framework specifically for observability contexts, analyzing real-world attack scenarios that demonstrate potential vulnerabilities. Gain practical insights into securing observability pipelines through defensive strategies and learn to build resilient alerting systems that can withstand security threats. Develop an actionable plan to transform observability blind spots into meaningful security insights, covering topics from the traditional observability triad through advanced threat detection and response mechanisms.