Application Threat Modeling with Trike

AppSec Village welcomes all travelers to choose from talks by expert community members, an all AppSec-focused CTF, contests that challenge your mind and your skillz, and more. Bring your thirst for knowledge and passion for breaking things, and your visit to AppSec Village will be a thrill!

AppSec Village

AppSec Village @ DEFCON WORKSHOP (DEFCON BADGE REQUIRED)

Las Vegas Convention Center, West Hall, Level 2, Rooms 228-230

To make sure more villagers get to attend our awesome AppSec Village workshop. Please limit yourself to no more than two workshops out of the five we offer. We will randomly cancel registrations of registrants going over this limit. Thank you for making it fun for everyone!If you see that you won't arrive at the workshop, please cancel. Someone on the waiting list will really appreciate it!----- <ul><li>Must have a valid DEFCON badge to attend.</li><li>Must be present for event 10 min before scheduled beginning time.</li><li>Participants must agree to AppSec Village &amp; DEFCON Codes of Conduct</li></ul> The earlier we perform security interventions, the better. The best time? While we’re designing an application. This workshop will discuss the importance and use of Application Threat Modeling during app design, how to apply it to existing applications during later phases of development, then perform application threat modeling on an example web application using the Trike methodology.The presented methodology is built on the concept that understanding the design of an application is all that is needed to create a threat model - and doing so can remove the uncertainties and brainstorming that other security threat modeling can require. Rather than requiring a deep security knowledge, all we need is to understand the application - something developers are uniquely suited to do. AreTilleryDirector of Training and Education @ Neuvik Tillery (they/them) is a co-founder of Neuvik Solutions and serves as their Director of Training &amp; Education. Tillery has been in formal education and professional training roles for the US Department of Defense as well as for commercial companies for more than a decade. They have spent their career in cybersecurity on both sides of the red/blue divide, first focusing on reverse engineering and exploit development, then bringing their offensive mindset to the field of Application Security. Tillery brings deep technical knowledge and pedagogical training to instruction in cybersecurity, computer science, and mathematics.<a href="https://appsecvillage.com/events/dc-2024/application-threat-modeling-with-trike-687607" title="https://appsecvillage.com/events/dc-2024/application-threat-modeling-with-trike-687607" target="_blank" data-msys-clicktrack="0" rel="nofollow noopener noreferrer">https://appsecvillage.com/events/dc-2024/application-threat-modeling-with-trike-687607</a>

Our {communityGuidelinesLink} describe the sort of content we prohibit on Eventbrite. If you suspect an event may be in violation, you can report it to us so we can investigate.

To report other categories of prohibited or illegal content, submit {link}

Application Threat Modeling with Trike

More events from AppSec Village

Discover more events from AppSec Village, from Science & Tech to other experiences you might love.

Still looking for the right event?

Explore all events in Las Vegas and filter by date, category, and more to find the perfect fit.

Application Threat Modeling with Trike

More events from AppSec Village

Discover more events from AppSec Village, from Science & Tech to other experiences you might love.

More Science & Tech events

Browse more Science & Tech events with different dates, prices, and formats to find your next great experience.

Still looking for the right event?

Explore all events in Las Vegas and filter by date, category, and more to find the perfect fit.