Hendrik Ewerlin -- Threat Modeling of Threat Modeling

Robert and Chris talk with Hendrik Ewerlin, a threat modeling advocate and trainer. Hendrik believes you can threat model anything, and he recently applied threat modeling to the process of threat modeling itself. His conclusions are published in the document Threat Modeling of Threat Modeling, where he aims to help practitioners, in his own words, "tame the threats to the threat modeling process. Hendrik Ewerlin loves to build secure software and empower people to do so. He strongly believes in the power of threat modeling. He provides threat modeling training and helps software vendors who are new to threat modeling and want to improve the security of their systems.

Connect with Hendrik Ewerlin:
→ Hendrik Ewerlin
→ Threat Modeling of Threat Modeling

Mentioned in this episode:
→ Hendrik Ewerlin
→ Threat Modeling of Threat Modeling
→ Austin Kleon books
→ Adam Shostack
→ Threat Modeling Manifesto
→ OWASP SAMM

Follow the Application Security Podcast:
➜ Home
➜ X
➜ LinkedIn
➜ YouTube
➜ Instagram
➜ Facebook

Chapters:
00:00 Meet Hendrik Ewerlin: Threat Modeling of Threat Modeling
02:44 Exciting adventure called application security
04:53 Let them build something when they're, when they're in their teens
07:21 Very meta, which I know is a word from a few
10:23 Is your approach, uh, to threat modeling and threat modeling programs
11:39 Yeah, I did notice that you, you took, you took various
14:51 And getting on the same plane. So, I know one of
18:11 There some other things that you discovered as you were working
20:39 Document. So one of the things, Hendrick, that I noticed about
25:01 Yeah, and I love where you went with that. One of
27:56 Enough people like me smile. You, so you wrote mitigation debt
30:36 All right, three questions. First one is, what's your most controversial
32:20 Okay. And the third question is, uh, what's your top book