Summary:

In this episode, we sit down with Geoff Hill from Tutamantic_Sec to explore the innovative approach of Rapid Threat Model Prototyping (RTMP). Geoff shares his journey from being a C++ developer to becoming a threat modeling expert, highlighting the challenges and successes he encountered along the way. This episode dives deep into how RTMP can help streamline threat modeling processes, making them more efficient and scalable.

Key Discussion Points:

1. Introduction to RTMP:

   • Geoff explains the origins and the need for a new threat modeling approach.

   • Discussion on traditional threat modeling challenges and how RTMP addresses them.

2. Implementation and Benefits:

   • Detailed walkthrough of RTMP’s implementation in various organizations.

   • How RTMP integrates with existing development workflows like Agile and DevOps.

   • Benefits of using RTMP, including reduced workload on security teams and improved security posture.

3. RTMP Methodology:

   • Explanation of the stages and numerical ranking system in RTMP.

   • How RTMP utilizes open-source frameworks and tools.

   • The role of security champions within development teams.

4. Practical Applications and Case Studies:

   • Real-world examples of RTMP in action.

   • Success stories and lessons learned from implementing RTMP in different industries.

5. Future of Threat Modeling:

   • Geoff’s insights on the evolution of threat modeling.

   • Upcoming trends and the importance of being proactive in security.

Resources Mentioned:

• Tutamantic

• GitHub Repository for RTMP

• OWASP Top 10

Connect with Geoff Hill:

• Twitter: @Tutamantic_Sec

• LinkedIn: Geoff Hill

Contact Information:

Leave a comment below or reach out via the contact form on the site, email [timothy.deblock[@]exploresec[.]com, or reach out on LinkedIn.

Check out our services page and reach out if you see any services that fit your needs.

Social Media Links:

[RSS Feed] [iTunes] [LinkedIn]

Sign up with your email address to receive news and updates.

We respect your privacy.