Threat modeling helps security professionals understand what can go wrong—and what to do about it. Learn to use the four-question and STRIDE frameworks for threat modeling.
- Delivering secure systems is a matter of both professional pride and obligation. People are more and more concerned about hacking, and we need our systems to be better, safer, without derailing a project we're supposed to be helping. By asking simple questions and looking for the most common sorts of issues, you can improve the security posture of a project. Through a simple case study, I'll show how to apply the most effective threat modeling practices to any technology you're working on.
I'm Adam Shostack. Over my 20 years of threat modeling, I've written a book, shipped software, and created a game all to help others threat model. Join me in my course where I'll share practical techniques that can have you threat modeling today.