Explore the FAIR STRIDE method for creating application threat models in this 51-minute conference talk from BSidesSF 2023. Learn how to determine the ROI of security controls and prioritize risk reduction efforts for your product. Discover techniques for building business-relevant threat models that can help answer critical questions, such as whether to focus on fixing high-priority vulnerabilities or addressing multiple medium-priority issues. Gain insights into developing a scalable risk reduction roadmap for your product using the FAIR STRIDE approach.
Overview
Syllabus
BSidesSF 2023 - FAIR STRIDE - Building Business Relevant Threat Models (Arthur Loris)
Taught by
Security BSides San Francisco
Related Courses
-
FAIR STRIDE - Building Business Relevant AppSec Threat Models
-
Threat Modeling Security Fundamentals
-
Threat Modeling for Secure Software Design
-
Topics of Interest - Agile Threat Modeling with Open-Source Tools
-
Building Sustainable Security Programs
5.0 -
Offensive Threat Models Against the Supply Chain
