Crawley Threat Modeling Gameplay with EoP

A reference manual for spotting threats in software architecture
1. Auflage 2025
ISBN: 978-1-83508-915-6
Verlag: De Gruyter
Format: EPUB
Kopierschutz: 0 - No protection

E-Book, Englisch, 256 Seiten

No detailed description available for "Threat Modeling Gameplay with EoP".

Autoren/Hrsg.

Crawley, Brett

Weitere Mitwirkende

Shostack, Adam

Fachgebiete

• Mathematik | Informatik EDV | Informatik EDV & Informatik Allgemein

Über Autor(innen)

Crawley Brett :

Brett Crawley is a principal application security engineer, (ISC2) CISSP, CSSLP, and CCSP certified, the project lead on the OWASP Application Security Awareness Campaigns project, and the author of the OSTERING blog on security. He has published a Miro template for threat modeling with the Elevation of Privilege card game and also published the CAPEC S.T.R.I.D.E. mapping mind maps and other resources. With over 10 years of application security experience and over 25 years of software engineering experience, he works with teams to define their security best practices and introduce security by design into their existing SDLC, and as part of this initiative, he trains teams in threat modeling because good design is of key importance. He is also an advocate for using a data-driven approach to AppSec, to help identify the business-critical components, thereby optimizing the reduction of risk to the organization.