Rapid Threat Model Prototyping; threat modeling for Agile & DevOps | Nullcon Webinar | Geoffrey Hill
Abstract:
-----------------
The learning path covers why we need to do security architectural and design analysis & threat modelling as part of our secure software development lifecycle. This is even more important today, with high-volume code turnarounds which can create a huge amount of system dependencies in a short period of time
Speaker Bio:
---------------------
Geoff is the founder of Tutamantic Sec and the creator of the open-source Rapid Threat Model Prototyping methodology in addition to the Tutamen automated threat modelling SaaS product. He is current working as the head application security architect for a financial commodities firm in London.
He built up his work experience initially by building Wall Street trading platforms including a fair-value options pricing suite that sold results daily on the New York Commodities Exchange.
As a global technology leader he has nearly 3 decades of software design, development and security in cities around the world. This includes 8 years at Microsoft, working both as a developer/consultant and as an application security specialist. During this time he created an Agile-focussed Security Engineering process. He also developed threat model theories with the help of one of the leading threat model experts, Adam Shostack.
----------------------------------------------
#threatmodeling #cybersecurity #Nullcon
Follow nullcon on Facebook: / nullcon
Twitter: / nullcon
LinkedIn: / nullcon
Website: https://nullcon.net