Adaptive Threat Modelling

Explore adaptive threat modeling techniques in this GOTO 2017 conference talk by Aaron Bedra, Chief Security Officer at Eligible. Learn why traditional static threat modeling falls short and how to create dynamic models that evolve with your changing threat landscape. Discover methods for incorporating real-world data, assessing risk and loss, and automating threat intelligence. Gain insights into practical exercises, Markov chains, and predictive modeling to enhance your security strategy. Understand how to effectively communicate and quantify security measures, making them more accessible to your team. Leave with actionable knowledge to implement adaptive threat modeling in your organization, improving your ability to anticipate and respond to emerging security challenges.

Intro
Why
Modeling Zig
Labels
Attack scenarios
Focus on reality
Risk
Loss
Vault Fire
Loss Events
Frequency
Quick Dirty
Questions
Demo
Moving Forward
Things Change
Exercises
Automation
Behavior
Markov Chains
Automatic Threat Intelligence
Make Security Go Away
Predict
Trap Model
Controls
Communication
Quantifying
Focus
Modeling Book