Iterative Threat Modelling - Security in Agile Development

Explore iterative threat modeling techniques for enhancing security in agile development processes in this conference talk from Conf42 DevSecOps 2023. Gain insights into common misconceptions about threat modeling, learn how to apply agile principles to security practices, and understand the STRIDE methodology for identifying potential threats. Discover practical examples using the OWASP Juice Shop project, covering key steps such as defining security objectives, scoping, creating data flow diagrams, and prioritizing risks. Delve into mitigation strategies, reflection techniques, and various workshop formats for implementing threat modeling in your software development lifecycle. Walk away with valuable takeaways and resources to further your knowledge in this critical aspect of DevSecOps.