Name: OWASP Meeting in Krakow - Threat Modeling
Start: 2024-12-03T18:00:00+01:00
End: 2024-12-03T21:00:00+01:00
Location: Techie's

Hi,
This time we will focus on threat modeling - a proactive technique of risk analysis which could help to determine and fix potential vulnerabilities before they will even appear in the code, configuration or architecture.
Nowadays "threat modeling" has become a trendy buzz word. During our meetup we will try to uncover it's real meaning and discuss how to practically implement threat modeling in software development lifecycle.

Agenda:

1. **Threat modeling for application security – a case study**
*Marta Rusek (Senior Cloud Security Engineer) & Wiktor Cudek (Principal Cloud Security Engineer) - Pegasystems.*
Threat modeling is one of the parts of the SDLC process, that embed security throughout early stages of development. Thanks to that, we are able to detect potential problems at the beginning and avoid a lot of changes on the advanced maturity of the product.
The goal of this presentation is to compare the most well-known Threat
Modeling methodologies, their strong and weak sides. Based on our knowledge, we will compare these methods with the process and tools that are used in our company, and share our experience based on the work with development teams.
2. After the break, we will host a **discussion about threat modeling**. Share our experiences with TM. When it's applicable. How to start doing TM in your project? Which techniques and methodologies works and when? What should be our goals? Is it possible to simplify the threat modeling process? That's just example of questions that we want to ask.

Please RSVP and save the date!
If you have a minute, **please share this invitation** with friends and in your social media.

Wojciech Dworakowski

Jakub Mackowski

OWASP Poland

OWASP® Foundation 

Technology

White Hat Hacking

OWASP

Data Security

Web Security

Network Security

Information Security

Application Security

Software Security

Ethical Hacking

Cloud Security

Computer Security

Cybersecurity

Web Application Security

Hacking

Penetration Testing

Marta Rusek: Cloud security engineer with 4+ years of professional experience. Work in a blue team, maintain and help development teams with fulfilling SDLC process.

Wiktor Cudek: Application security engineer with 5+ years of professional experience in the cybersecurity field. Focused mosty on areas around securing the SDLC, making security processes more "user-friendly", autonomous and reliable. CISSP certified.



OWASP Poland

OWASP Meeting in Krakow - Threat Modeling

OWASP Poland

Details

Members are also interested in