Building a Valid Threat Library for Cloud-Based Applications

Explore techniques for building a dynamic threat library to enhance application threat modeling in cloud environments. This 41-minute conference talk from OWASP AppSec EU 2018 DevOps Track delves into leveraging Azure and AWS components to add threat context to your models. Learn how to tap into cloud monitoring and logging capabilities to substantiate threat models, with a focus on mission-critical infrastructure in Energy and Transportation sectors. Gain insights on creating a comprehensive threat library that strengthens your application's security posture in cloud-based deployments.

Building a Valid Threat Library for Cloud Based Applications - Tony Ucedavelez