Threat Modeling Intensive (September 2022)

Participants will deepen knowledge + skills needed to consistently and efficiently utilize threat modeling to identify threats, mitigation techniques, document results, deliver more secure products, and champion threat modeling within organizations.

Enroll Now

Countdown timer

00 Days
00 Hours
00 Minutes
00 Seconds

Enroll Now

Threat modeling intensive

Our most popular course

For technology professionals looking to deliver secure systems, threat modeling is an essential skillset. Learn from Adam Shostack, who wrote the most popular book on the topic. September 12 - September 16, 8 AM-10 AM Pacific. Equivalent to a 2 day in-person course, 20 hours including classes and homework.

Enroll Now

Every participant receives

printed and electronic copies of:

Slidebook (125 pages, spiral bound)
Elevation of Privilege game
Exercises booklet
Threat modeling stencil
Whiteboard sketchbook

Course curriculum

1. Preparing for Distributed Learning
2. Welcome + Introduction
3. Learning Online
4. Welcome to Threat Modeling
5. Join Slack
6. Preparing For Threat Modeling Intensive: Time Block
7. Syllabus
8. Slide Book (downloadable)
9. Exercises File (downloadable)
10. Exercises: Propose a System for Analysis + Drawing Tools
11. Course Retrospective Timeblocks
1. Monday Calendar Hold with Zoom Link
1. The Question: What Are We Working On?
2. DFDs: Diagrams + Models
3. Trust Boundaries (Introduction)
4. Exercises: Data Flow Diagram Essay + Data Flow Diagram Creation
5. Models (answer key)
6. Exercises: Trust Boundaries Essay + Draw Trust Boundaries
1. Tuesday Calendar Hold with Zoom Link
1. Sketching
2. DFDs in Depth
3. Boundaries In Depth
4. What Can Go Wrong? Brainstorming
5. STRIDE (Introduction)
6. Applying STRIDE
7. Tracking Threats + Assumptions
8. Exercises: STRIDE Essay + Apply STRIDE
1. Wednesday Calendar Hold with Zoom Link
1. Tools in Context
2. Elevation of Privilege
3. Attack Trees
4. Final Tips + Recap: What Can Go Wrong
5. Mitigations
6. Strategies for Addressing Threats
7. Addressing Threats
8. Exercises: Design Controls - Broadly + Design Controls in Depth + Risk Mitigation
9. Did we do a good job?
10. Retrospectives
1. Thursday Calendar Hold with Zoom Link
1. Introduction to Kill Chains
2. Applying the Kill Chain
3. "Act On Objectives" Stage of the Kill Chain
4. MITRE'S ATT&CK Kill Chain
5. Exercises: Kill Chain Essay + Apply a Kill Chain + End-to-End Threat Model
6. (optional) Kill Chain Cheat Sheet
7. (Optional) A Sense of Urgency
8. (Optional) Models of Change
9. (Optional) Managing "What We're Going to Do About it"
10. (Optional) Chess and Arms Races
11. Optional (Prioritization)
12. Final Exercise: End-to-End Threat Model
1. Friday Calendar Hold with Zoom Link
1. Answer Key
2. Threat Modeling Lessons From Star Wars
3. Threat Modeling in 2020
4. The Threat Modeling Manifesto
1. Sign up for our mailing lists.
2. How Did We Do? Give us survey feedback
3. Participate in a Retrospective of Threat Modeling Intensive

About this course

$3,400.00
59 lessons
4 hours of video content

Reviews

"One of the top professional development courses in my 35+ year career. - Charles F."

Threat Modeling Intensive (September 2022)

Countdown timer

Threat modeling intensive

Every participant receives

Course curriculum

Getting Ready (Due: Monday, September 12)

Monday Live Class

What Are We Working On? (Due: Tuesday)

Tuesday Live Class

What Can Go Wrong? (Due: Wednesday)

Wednesday Live Class

What Are We Going To Do About It? (Due: Thursday)

Thursday Live Class

Did We Do A Good Job? (Due: Friday)

Friday Live Class

Bonus Content

How Did We Do?

About this course

Reviews