PASTA Threat Modeling for Cybersecurity | Threat Modeling Example скачать в хорошем качестве

PASTA Threat Modeling for Cybersecurity | Threat Modeling Example

How do you bring context to cybersecurity risks? PASTA threat modeling co-creator, Tony UV, explains how having a risk-centric approach to threat modeling can help focus and drive your security operations. This Live webinar was first recorded on our LinkedIn page and is an introduction into a risk-centric approach to threat modeling and PASTA Threat Modeling. We welcome all software and application developers, architects, and security professionals to join us in creating stronger threat models. // MORE PASTA RESOURCES AT VERSPRITE // ✦ Learn More About PASTA: https://versprite.com/security-offeri... ✦ Download an Excerpt From Tony’s Book on PASTA: https://versprite.com/security-testin... ✦ Blog - Threat Models as Blueprints for Threat Intelligence, Threat Data (SOCs): https://versprite.com/blog/threat-int... CHAPTERS: 00:00 Welcome: How to Apply PASTA To Security Operations with Tony UcedaVélez 02:24 What is PASTA Threat Modeling methodology? 03:18 How PASTA works as threat modeling for applications 03:39 How PASTA gives risk context while other threat matrixes don’t 04:36 Manual threat models vs threat model tools 05:20 How risk-based threat models helps security professionals 06:52 C.I.A.C. – How to think using CIAC to understand business impact 11:46 How to find your application attack surface using 12:50 Take your PASTA threat model to your penetration testing company 14:55 Gitlab uses PASTA threat modeling for their business 16:21 7 Stages of PASTA slide from ADDO (All Day DevOps) presentation 17:59 Using PASTA threat models for cryptocurrency / Bitcoin, and financial institutions 19:28 Outro – Invite to cybersecurity training Live stream “Cooking with PASTA” 19:40 End // ABOUT TONY // Tony UcedaVélez is the co-creator of the Process for Attack Simulation & Threat Analysis and the CEO of VerSprite. Tony has over 25 years of IT/InfoSec work across a vast range of industries. He is also the OWASP leader for Atlanta, GA. Connect with Tony: ✦ LinkedIn:   / tonyuv   ✦ Twitter:   / t0nyuv   // FIND VERSPRITE’S CYBERSECURITY TEAM ONLINE // ✦ VerSprite: https://versprite.com/ ✦ LinkedIn:   / versprite-llc   ✦ Twitter:   / versprite   ✦ YouTube:    / @versprite   // ABOUT VERSPRITE // VerSprite is a leader in risk-based cybersecurity services and PASTA threat modeling, enabling businesses to improve the protection of critical assets, ensuring compliance, and managing risk. Our mission is to help you understand and improve your organization’s cybersecurity posture. With cyberattacks increasing in number and sophistication daily, it is important to protect your organization’s assets, protect your clients, and to maintain the same, great reputation and trust you have worked hard to build. We believe that an integrated approach will result in better and more cost-effective security practices and better business outcomes overall. ✦ Visit our website: https://versprite.com/ #threatmodeling #cybersecuritytraining #pastathreatmodel