Brett Crawley -- Threat Modeling Gameplay with EoP скачать в хорошем качестве

Brett Crawley -- Threat Modeling Gameplay with EoP

Brett Crawley discusses the Elevation of Privilege (EoP) card game, a powerful tool for threat modeling in software development. The discussion explores recent extensions to the game including privacy-focused suits and TRIM (Transfer, Retention/Removal, Inference, Minimization) categories. Crawley emphasizes that threat modeling shouldn't end with the game but should be an ongoing process throughout an application's lifecycle, ideally starting before implementation. He also shares insights from his book, which provides detailed examples and guidance for teams new to threat modeling using EoP. Mentioned in this episode: Brett’s book: Threat Modeling Gameplay with EoP: A reference manual for spotting threats in software architecturehttps://www.packtpub.com/en-us/produc... Brett's Book recommendation: Conscious Business by Fred Kofman https://www.fredkofman.org/lec-ing.php