BSidesSF 2023 - FAIR STRIDE - Building Business Relevant Threat Models (Arthur Loris)

FAIR STRIDE - Building Business Relevant Threat Models
Arthur Loris

Have you ever wondered what the ROI is on a security control? Or whether you should spend time fixing 2 highs or 47 mediums? FAIR STRIDE is a method for creating application threat models that can answer these questions to help define a roadmap towards scalable risk reduction for a product.

https://bsidessf2023.sched.com/event/1Hzul/fair-stride-building-business-relevant-threat-models

application arthur building business business control fair loris roi security stride threat threat models