Elevation of Privilege - Drawing Developers into Threat Modeling

Explore a 23-minute conference talk from USENIX that introduces "Elevation of Privilege," an innovative game designed to engage non-security professionals in threat modeling. Discover how Adam Shostack from Microsoft leverages various techniques to make threat modeling accessible, engaging, and non-intimidating for developers. Gain insights into the game's objectives, design principles, and the trade-offs made during its development. Learn about the potential of gamification in information security education and how it can help achieve important goals in the field. Understand the unique approach to studying security tools for software engineering presented in this talk, and consider the broader implications for integrating security practices into development processes.