The Balancing Act by Security Compass

Spencer Koch - Scale Your Threat Modeling Beyond STRIDE and Data Flow Diagrams

April 30, 2021

Today we are joined by Spencer Koch, Offensive Security Professional at Reddit, to talk about threat modeling and the issues with scaling the traditional processes. These days, we don’t have enough security practitioners to perform threat modeling on every system. In many cases, there is also an emphasis on trying to achieve perfection instead of doing what’s “good enough.”  In this episode, we delve into how shifting toward a more democratized and decentralized approach that allows more people to get involved.

Podbean App

Play this podcast on Podbean App