Toreon proposes an action-packed 2-day Threat Modeling course specifically for DevOps Engineers to improve reliability and security of delivered software.
We will teach an iterative and incremental threat modeling method that is integrated in the development and deployment pipeline.
As speed of delivery is crucial with shorter development cycles, increased deployment frequency, and more dependable releases we focus on a risk-based unified threat modeling practice that is in close alignment with business objectives.
If you want to find out more, or schedule your own training: contact us through our Contact Form.
We converted our Black Hat edition training to an online action-packed 2 day training with hands-on workshops covering real live use cases to learn how to do practical threat modeling.
You will learn the basics of threat modeling and to understand what you are building, how to identify threats using the STRIDE method and how to address each threat.
You will be challenged to perform practical threat modeling in squads of 3 to 4 people covering the different stages of threat modeling on an incremental business driven CI/CD scenario:
- Sprint 1: Modeling a hotel booking web and mobile application, sharing the same REST backend
- Sprint 2: Threat identification as part of migrating the booking system application to AWS
- Sprint 3: AWS threat mitigations for the booking system build on microservices
- Sprint 4: Building an attack library for CI/CD pipelines
This course is for you if you are an IT architect, system manager, security professional, ethical hacker or AppSec champion.
Download the full training outline and details FIXME
