Redefining Threat Modeling: Security team goes on vacation
Jeevan Saini on March 29th 2021 It was a cold and dark mid-December day in Vancouver; another Staff Security Engineer and I were a part of a developer-led threat modeling session. We couldn’t find a single additional security concern for the developer-led team. The developer leading the project had considered all the options! When the session was over, the Staff Security Engineer asked: “What have we done? What purpose do we even have any more?” We joked about losing our jobs, but we knew that this is the best kind of problem to have! Record scratch, freeze frame: You may be wondering...
Source: segment.com