Threat Modeling or Whiteboard Hacking training
This 2-day threat modeling course is aimed at software developers, architects, system managers, and security professionals (discover who is involved in threat modeling here). It is organised in-house on-demand, in open sessions, and at conferences.
Threat modeling is the way to avoid risks in your applications upfront. Without threat modeling your protection is a shot in the dark and you will only know your vulnerabilities once someone exploits them.
Threat modeling consists of workshops where you examine an application or system together with business and IT owners. You draw diagrams in order to detect security problems based on credible attack vectors.
We follow the STRIDE methodology as developed by Adam Shostack and have developed a practical training course to turn YOU into a great threat modeler.