Simone Curzi - Developer Centric Threat Modeling

Today we are joined by Altaz Valani from Security Compass and Simone Curzi, Principal Consultant at Microsoft, to talk about the role of developers within threat modeling. When we mention threat modeling, what often comes to mind are data flow diagrams created during a security design process. After these diagrams are created and eventually hit the developer backlog, we discover more insights that further evolve the security design. In this way, developers are crucial to an evolving threat model activity. Yet, many questions exist. We try to answer some of those developer questions related to threat modeling.

Useful links from this podcast:

• https://simoneonsecurity.com/
• https://threatsmanager.com/ 
• https://www.threatmodelingmanifesto.org/ 
• https://cve.mitre.org/
• https://cwe.mitre.org/