BSidesSF 2020

Event locked in Sched to limit confusion, see registration to determine current session availability.
Event held offsite, location to be announced (NOT METREON!)
Registration at https://bsidessf.regfox.com/2020 REQUIRED (cannot be reserved with Sched)

Developers and security practitioners face challenges in securing their cloud applications. With applications moving to cloud environment, new threat vectors are introduced that change the attack surface of the application. As a result, threat modeling becomes a critical step in the software development process.

A comprehensive threat model will help teams to identify, manage, and communicate potential risks of their cloud applications; regardless of exploitability. A continuous threat modeling process will enable teams to measure the effectiveness of security controls by monitoring vulnerability trends across release cycles.

In this course attendees will learn fundamentals of threat modeling, creating a detailed Data Flow Diagram and mapping of possible threats in their application hosted on platforms like AWS, GCP, Azure etc. They will also brainstorm and formulate threat modeling practices that can be incorporated into any SDLC process.