HH.security #20

Hello folks,

we want to get together one last time this year to have a short recap, enjoy the time before the holidays and have a great workshop!

Yes, you read that right. We try something new! We are very much looking forward to it and hope you are curious as well. Also, the topic is important!

One organizational note: We are hosted by Spiegel. So, a great view is guaranteed. But in order to get to the meetup room, please report at the reception.

Threat Modeling Workshop by Andrea
In this workshop we‘re going to learn about threat modeling, starting from the need for it from a purely practical and economical perspective to the different approaches and tools available to a security expert.

Then we’re going to walk through a Visual, Agile Simple Threat modeling (VAST). After creating groups in the public, it’s going to be your turn to apply what you learned! Each group will be tasked with applying the VAST methodology to an example solution architecture. At the end of the exercise, we will discuss the results.

Presentation Introduction to Threat Modeling

• Where does it fit in respect to other security activities, why do we do it
• What types of techniques can one apply, where does the magic come in
• Walkthrough VAST threat modeling
• Classifying risks with OWASP risk rating

Hands-on workshop VAST threat modeling

• Group based threat modeling
• Classification of identified risks
• Discussion on results