Adam Shostack — Remote Threat Modeling

Adam joins us to discuss remote threat modeling, and we do a live threat modeling exercise to figure out how remote threat modeling actually works. On this episode of the Application Security Podcast, Robert and I are joined by Adam Shostack, and the topic we discuss is remote threat modeling. We're all living in this new world where we're working from home or we're sheltering at home, and the question we pose is, how are we still going to make progress on rolling out threat modeling when we can't meet with people face-to-face and work directly on a whiteboard? So we hope you enjoy this special episode of the Application Security Podcast with— Adam Shostack.

The Application Security Podcast is brought to you by Security Journey.

About Security Journey
On this episode of the Application Security Podcast, Robert and I are joined by Adam Shostack, and the topic we discuss is remote threat modeling.
→ Learn more about Security Journey

Connect with Adam Shostack:
→ Shostack + Associates
→ Adam Shostack

Mentioned in this episode:
→ Shostack + Associates
→ Adam Shostack
→ OWASP Threat Dragon Project
→ OWASP Slack

Follow the Application Security Podcast:
➜ Home
➜ X
➜ LinkedIn
➜ YouTube
➜ Instagram
➜ Facebook

Chapters:
00:00 Meet Adam Shostack: Adam Shostack — Remote Threat Modeling
01:52 So we find ourselves right now recording this episode. The date
05:20 Are some of the tools What are some of the tools
07:57 So we'll— yeah, we can add in a couple of different
10:10 So then we have a lock activator. So it's making me
15:51 Yeah, so you're trying to minimize the friction of the tool
17:13 I think the takeaway there for our listeners that might be
19:35 Yeah, and I'm a fan of Aries Risk from Continuum as
22:08 Yeah. So let's come back around now to some of Robert's
24:20 Yeah, and I hear both. I hear sometimes, no, not so
26:12 That makes me think as a teacher of threat modeling, Something