What Could Possibly Go Wrong? Plain Language Threat Modeling in DevSecOps

In this session, a co-author of the Threat Modeling Manifesto will show how capturing threat information in plain-language in the user-story breaks through roadblocks. A flow that removes security gates and integrates threat information in all phases of the lifecycle will be presented. Stop trying to predict attacker behaviors and instead focus on identifying critical assets and defenses.

Interested? We have you covered! This popular session will also be streamed live in The Session Viewing Point, West Level 2 Room 2004.