In this workshop, you’ll learn the basics of threat modeling and apply the knowledge to create a threat model following six steps right in a spreadsheet. The six-step spreadsheet template is based on the STRIDE framework, one of the most popular security threat modeling methodologies.

Agenda

• Introduction to Threat Modeling
  • What’s threat modeling
  • Threat Modeling classification: STRIDE
  • Threat Modeling elements
  • Threat Modeling process: the four-question framework
  • Applying STIDE to Threat Modeling elements
  • Cloud Threat Modeling
• Demo: using the six-step spreadsheet template to create a threat model for a two-tier web application