What does a threat model look like? How do you go about doing one? At TAG Security, we’ve developed a lightweight threat model to let projects easily go through the exercise of modeling their project. In this session, we will have a hands-on exercise and create a threat model for the CNCF project using the lightweight model we’ve developed!

CloudNativeSecurityCon is a two-day event designed to foster collaboration, discussion and knowledge sharing of cloud native security projects and how to best use these to address security challenges and opportunities. The goal is not just to propose solutions that incrementally improve what has come before, but to give room to breakthrough technology and advances in modern security approaches. Topics of sessions and lightning talks presented by expert practitioners include architecture and policy, secure software development, supply chain security, identity and access, forensics, and more.

🦝 Security Threat Modeling Live from Scratch Session

Conference: Cloud Native SecurityCon North America 2023

Authors: Andrew Martin

Abstract

Post a comment

Related work

Get On With The Program: Threat Modeling In and For Your Organization

A Raccoon And a Group Of Turtles Secure Clusters Together!

Security Threat Modeling

Filling the Gaps in Kubernetes Flavored SLSA with Threat Modeling

No One Is Saving Us But Us

Hands-On: Purple Team Exercise Workshop (Play both Red Team and Blue Team)