If you're a software developer, systems manager, or security professional, this book will show you how to use threat modeling in the security development lifecycle and the overall software and systems design processes. About Threat Modeling: Designing for Security Hiring Adam to deliver training in threat modeling and secureĭevelopment lifecycles (SDL/SDLC). Organizations working to deliver more secure products and services are If you work in medical devices, please apply. We had planned for May, and are now looking at our options. The FDA has awarded funding for Medical Device Cybersecurity Threat Modeling boot camps, which will be open to qualified participants. (Delivered!) MDIC Threat Modeling Boot Camp As a consultant, you'll have the rich experience necessary to pass this technique on to your customers. This is an affordable accessible means for developers to use their system knowledge to find how specific threats from the past might apply to your system today. Worried about security but need to find a path to doing something about it? We are here to blaze a trail through the confusion. (Successful!) Elevation of Privilege Hands onĪ short introduction to Elevation of Privilege, hands on. We have an upcoming Threat Modeling for Champs ( kicks off July 19), and Threat Modeling Intensive ( kicks off Oct 11.)įor those who want to hear about upcoming trainings as they're announced, we have a mailing list just for you! Sign up to hear about our upcoming courses. July 31/Aug 1 and Aug 2-3 Our open courses (virtual) This is capped off with an end-to-end exercise that brings the skills together. Students will start threat modeling early on day 1, followed by an understanding of traps that they might fall into, and then progressing through the four questions: what are we working on, what can go wrong, what are we going to do about it, and did we do a good job. This hands-on, interactive class will focus on learning to threat model by executing each of the steps. Trainings and Other Events Applied Threat Modeling at Blackhat 2021 (virtual) Recent accolades include Cyber Defense Magazine's Top 100 Cybersecurity books of all time (2021), HashedOut's 11 Best Cybersecurity Books (2020), Kobalt.io's 10 books (2020), Digital Guardian's The Best Resources for InfoSec Skillbuilding (2018) and the 2018 Summer Reading List from Outsystems Engineering. (Int'l Association of Privacy Professionals) Understanding of what threat modelers do, and why it's 'Even if you've never coded a line of software in your life,Īnd you don't know spoofing from a denial of

Microsoft stride threat model