Threat Modeling: Automated Tools vs Manual Methods

Presented by

Stephen De Vries, CEO , IriusRisk / Adam Shostack, Founder, Shostack + Associates

About this talk

Which approach is better? Creating a threat model from first principles or using a tool? In this edition of IriusRisk’s Threat Modeling Club Live! we meet with world-renowned threat modeling experts Adam Shostack and Stephen de Vries as they draw on their wealth of experience to discuss this in-depth, covering topics including: - Why would you want to do manual threat modeling, when tooling exists? - Why use tooling if your team is already capable of threat modeling? - Challenges in rolling out a threat modeling program.

Related topics:

More from this channel

Upcoming talks (0)
On-demand talks (10)
Subscribers (626)
IriusRisk is the industry's leading threat modeling and secure design solution in Application Security. With enterprise clients including Fortune 500 banks, payments, and technology providers, it empowers security and development teams to ensure applications have security built-in from the start - using its powerful threat modeling platform. Whether teams are implementing threat modeling from scratch, or scaling up their existing operations, the IriusRisk approach results in improved speed-to-market, collaboration across security and development teams, and the avoidance of costly security flaws.