AppSec Europe 2018

Threat Modelling has now been recognized as one of the core foundations of a solid architectural security program. Yet as the technique has spread, so too has the confusion over what it actually entails. Contradictory methodologies and advice are everywhere, and it often seems like no two people have the same definition of threat modelling.
Yet out of this confusion there can come opportunity. The one thing these different approaches all have in common is that they are all giving benefit to everyone using them. Can we take advantage of that to break these approaches down and use the parts to build a process that suits our case, rather than trying to apply a "one size fits all" approach?
In this session we'll get back to basics on what a threat model is, and then look to see how we can apply different techniques to drive out threats. We'll also go into the different ways that threats can be organized and used once they've been identified, and how modern Agile testing techniques can help us verify our models.  Finally we'll apply this approach to an unorthodox situation for threat modelling, and see how being flexible can help you design a process to fit your situation, rather than try to force yourself to fit a process.