Traditionally, Threat Models have been a slow and boring process that end up with a giant document detailing any possible security problem. This approach, although useful in the past, is not necessarily good in an ever changing environment. In this session, Mario Areias will introduce attack trees and how they can fit in a DevOps world. This talk will also challenge some of the assumptions about threat models.
Author Name: DevSecCon
Author Description:
DevSecCon is the global community dedicated to DevSecOps to help implement security in the overall development process. If you’re a security enthusiast & you want to learn more about how to better secure your team, then check out our community & resources.