Introduction to threat modelling

The purpose of this talk is to provide an overview of tools, techniques and processes to conduct threat modelling. Whether it's a whole organisation and specific project, the role of threat modelling is to provide clarity as far as the stakeholders risk appetite and prioritisation. This ensures that resources can be effectively applied to projects and that priority information requirements and sustainment are established.

This talk will go through:

1. An overview of adversarial thinking and the role of threat modelling.
2. The effectiveness and constraints of threat modelling.
3. Methods, experiences and our refined method of conducting threat models.