Threat Modeling

Threat modeling is the process of optimizing application security during the development phase by identifying potential threats, logical and structural vulnerabilities in applications. News, analysis, and strategies for security practitioners around threat modeling.

Threat Modeling

Model-Driven Security

Jim Routh - Aetna • •

For years now, leading-edge security thought leaders have called for organizations to shift from a conventional "peacetime" view of cybersecurity to more of a wartime mindset - acknowledging and responding to the aggressive tactics of global adversaries. It is time, then, for enterprises to shift from conventional to...

Start this Session

We Make It, You Break It: Why Enterprises Are Investing in Bug Hunters to Intentionally Hack Their Systems

Jon Green - Aruba - a Hewlett Packard Enterprise Company , Craig Ingram - Heroku • •

Crowdsourced cybersecurity, specifically bounty-based collaboration between organizations and white-hat hackers, is a burgeoning method of security reinforcement utilized by tech giants such as Google, Apple, and Microsoft, as well as other major companies in recent years. Instead of awaiting a malicious breach,...

Start this Session

Strength in Numbers; A Look Inside the Mind of a Hacker

Jon Green - Aruba - a Hewlett Packard Enterprise Company , Sam Houston - Bugcrowd , Craig Ingram - Heroku • •

Kevin Roose of the New York Times writes, "If there's a single lesson Americans have learned from the events of the past year, it might be this: Hackers are dangerous people." It's true - In the past year alone, not only have we witnessed hackers take down giant corporations like Equifax, but also, we've seen them...

Start this Session

Threat Hunting, From a Model-Driven Cybersecurity Approach

Jim Routh - Aetna • •

Four years ago, Aetna Global Security hired a chief data scientist for security - a former NSA data scientist who did an outstanding job building over 100 models and a big data infrastructure dedicated to security. The purpose of hiring this data scientist: to take multiple sources of log files from newly deployed...

Start this Session

Archived

Modelling Advanced Persistent Threats

Archived Session •

Arkajyoti Dutta - Ixia • •

This session will focus on illustrating how nation states and complex actors leverage their resources effectively in attacking campaigns. Specific attacking techniques will be discussed in detail. We will discuss how obfuscation techniques are used to blind defenders and also delve into the complexities of defending...

Start this Session

Archived

Advanced Modeling to Identify and Combat Fraud

Archived Session •

Lovell Hodge - TD Bank , Jerry Jeschke - TD Bank • •

Using the latest in modeling and identifying patterns, TD Bank is leading the way in finding solutions that can help to detect fraud; respond to fraud; investigate fraud intelligence and to use behavioral analytics for advanced, predictive, actionable information. By using a 360 degree view of the customer, TD Bank...

Start this Session