Threat Modeling

Hello fellow crafts-people,

we hardly ever get to talk about security, so I'm really looking forward to this evening: at the end of October Martin Schmidt joins us with a pragmatic introduction to threat modeling. He gave this talk at SoCraTes earlier this summer.
Please note: this event will be held in English.
Here is his abstract:

Threat Modeling
With this talk I will give you a pragmatic introduction to Threat Modeling. You will learn what it is, how to prepare and facilitate a session, as well as what to actually do with threats and risks. We will have a look at STRIDE to model security threats and at LINDDUN to model threats to privacy. By the end, you'll have everything you need to dig deeper into this topic or even run your first threat modeling session and start integrating it into your development lifecycle — the earlier, the better, because considering security as early as possible helps.

About the speaker
Martin studied biochemistry and found his way into tech via some side quests which led him first into high-throughput laboratory automation and then into software engineering. Over the years he found his place mostly in backend development, DevOps topics and systems design. A couple of years ago he started to look deeper into application security and started to make it a specialism. He is convinced that software development is as much a human discipline as a technical one – which is why his motto is 'Let's build it together'.

Many thanks to our sponsor codecentric AG for the venue, food and drinks!