Aligning Threats and Allies Through Stories - Security Exercises and Threat Modeling

Explore a 45-minute conference talk from BSides Chicago that delves into the concept of aligning threats and allies through storytelling. Learn how J Wolfgang Goerlich and Steven Fox present innovative approaches to threat management, branding, and security exercises. Discover the power of story-driven security as the speakers discuss the branding triad, threat modeling techniques, and attack paths. Gain insights into practical examples, including a Target case study, and understand the three levels of story-driven security. This informative presentation offers valuable strategies for enhancing organizational security through narrative-based approaches.

Intro
Introduction
Aligning Threats and Allies
Steven Fox
Branding
Branding Triad
Threat Management
Threat Modeling
Attack Path
Threat Model
StoryDriven Security
Security Exercises
Target Example
Summary
Three Levels of Story Driven Security