The Boring AppSec Podcast

S1E05 - Threat Modeling

Listen Later

Welcome to the Boring AppSec Podcast! In Episode 5, we dig deep into what threat modeling is from a practitioner's perspective. We compare it with design reviews and discuss when/how/why of threat modeling. In the end, we wrap up by talking about how Gen AI could help threat modeling significantly.


References:

We will try and add information about all the references we make here. Please enter rabbit holes at will :) 

  • Threat modeling manifesto - Threatmodelingmanifesto.org
    • STRIDE framework - https://en.wikipedia.org/wiki/STRIDE_(security) 
      • Tools for threat modeling
          • ⁠https://learn.microsoft.com/en-us/azure/security/develop/threat-modeling-tool⁠
          • ⁠https://www.iriusrisk.com/threat-modeling/freemium⁠
          • ⁠https://owasp.org/www-project-threat-dragon/⁠
          • ⁠https://excalidraw.com/⁠
          • ⁠https://www.securitycompass.com/sdelements/⁠
            • Talks on threat modeling
              • https://www.youtube.com/watch?v=KGy_KCRUGd4⁠ 
              • ⁠https://www.youtube.com/watch?v=wVSyqFdO-D8⁠ 
                • Articles - https://www.scaletozero.com/episodes/understanding-threat-modeling-with-jeevan-singh/ 
                • Gen AI related threat modeling tools/companies
                  • Stride GPT- https://stridegpt.streamlit.app/
                  • Nullify - https://www.nullify.ai/
                  • Remysec - https://www.remysec.com/
                  • Seezo - https://seezo.io/
                    • https://www.sarahtavel.com/p/ai-startups-sell-work-not-software 
                    • https://github.com/captn3m0/ideas 


                      • Contacting Anshuman

                      1. LinkedIn: ⁠⁠⁠⁠⁠https://www.linkedin.com/in/anshumanbhartiya/⁠⁠⁠⁠⁠ 
                      2. Twitter: ⁠⁠⁠⁠⁠https://twitter.com/anshuman_bh⁠⁠⁠⁠⁠ 
                      3. Website: ⁠⁠⁠⁠⁠https://anshumanbhartiya.com/⁠⁠⁠⁠⁠
                      4. Instagram: ⁠⁠⁠⁠https://www.instagram.com/anshuman.bhartiya/⁠⁠⁠⁠ 
                      5. YouTube: ⁠⁠⁠⁠https://www.youtube.com/@AnshumanBhartiya⁠⁠⁠⁠   

                        6. Contacting Sandesh

                        1. LinkedIn: ⁠⁠⁠⁠⁠https://www.linkedin.com/in/anandsandesh/⁠⁠⁠⁠⁠ 
                        2. Twitter: ⁠⁠⁠⁠⁠https://twitter.com/JubbaOnJeans/⁠⁠⁠⁠⁠ 
                        3. Website: ⁠⁠⁠⁠⁠https://boringappsec.substack.com/⁠⁠⁠⁠⁠ 
                          4. ...more
                          View all episodesView all episodes
                          Download on the App Store
                          The Boring AppSec PodcastBy The Boring AppSec Podcast