Quick Look: What Could Possibly Go Wrong? Plain Language Threat Modeling in DevSecOps

Presenter: Alyssa Miller, Business Information Security Officer (BISO), S&P Global Ratings

This Quick Look provides a short preview of the full session at RSA Conference 2022, taking place from June 6-9, 2022. In this session, a co-author of the Threat Modeling Manifesto will show how capturing threat information in plain-language in the user-story breaks through roadblocks. A flow that removes security gates and integrates threat information in all phases of the lifecycle will be presented. Stop trying to predict attacker …

devsecops go language modeling threat threat modeling