SecAppDev original
Continuous Threat Modeling: Let Developers Figure It Out
Video and handoutsSecAppDev 2025
-
Abstract
Threat Modeling has customarily been seen as a black art,a bit of an arcane discipline that not many are privy to. And that is, basically, wrong. Everyone threat models, all the time. And they very well should!
In this talk we will look at a couple of traditional Threat Modeling methodologies, what they’re good for, what they miss, and offer a new one that your developers can run with - agile and principle-based.
After that we will look at a threat-modeling-with-code tool, OWASP pytm, that can be used to support continuous threat modeling by your teams, see how it helps and what it doesn’t do.
Handouts available for this lecture
DownloadChapters
- Introduction and speaker background
- Starting with why: the Apollo 13 story
- What threat modeling is and is not
- Who should participate in threat modeling
- System modeling and threat elicitation
- Asking what could go wrong
- Writing useful threats and mitigations
- Using threat models across the SDLC
- Threat Modeling Manifesto and common failures
- How to know threat modeling is working
- The four questions methodology
- STRIDE overview and exercise
- PASTA and choosing the right methodology
- Continuous Threat Modeling explained
- Handbooks, checklists, automation, and AI tools
In-person course
Izar Tarandach taught at a previous edition of SecAppDev
SecAppDev is an immersive course in secure application development, running annually since 2005. World-renowned faculty from industry and academia deliver in-depth 90-minute lectures and full-day workshops in an intimate setting, typically in early June.
More about SecAppDev