Threat modeling adoption is growing, but teams hit a wall converting 'what can go wrong' into realistic threats with actionable defense strategies. The challenge? Insufficient time and knowledge. In this code talk, we'll demonstrate how ThreatForest, our Threat-Model-as-Code solution, solves this problem. We'll step through setting up automated workflows that take application context, architecture diagrams, and threat statements as inputs, then convert them into attack trees and attack steps with associated mitigation controls using AWS Threat Technique Catalog and other threat intelligence data. You'll leave with a practical framework and automation templates for making threat modeling a seamless part of your development process.
Learn More:
More AWS events:
go.aws/3kss9CP
Subscribe:
More AWS videos:
bit.ly/2O3zS75
More AWS events videos:
bit.ly/316g9t4
ABOUT AWS:
Amazon Web Services (AWS) hosts events, both online and in-person, bringing the cloud computing ...