🔴 Threat Modelling and Beyond with CAIRIS |

🛑 📣 Secure software needs design assurance, but code is too granular to spot all design problems.
Moreover, contemporary threat modelling practices don’t account for the broader context of use, which could be the source of human errors or violations.
CAIRIS is an open-source platform created to understand how tool-support could help design systems which are both secure and usable. In this talk, I’ll introduce CAIRIS and its key concepts, walk through how to carry out some simple threat modelling that accounts for context of use, model security risks, and consider how CAIRIS can be integrated into existing software design tool-chains.
📚 What will you learn?
✅ 1. Glean an understanding of what CAIRIS is, and where it is useful and is not useful.
✅ 2. Learn how to install and get started with CAIRIS.
✅ 3. Model not just threats but key context of use elements of a system.
✅ 4. Learn how to model risks and kill-chains of risks.
✅ 5. Draw ideas on how to integrate CAIRIS into your own tool-chains.
🎤 Speaker: Dr. Shamal Faily
🛑 If you liked this video and want to see more from Practical DevSecOps, subscribe to our channel: / practicaldevsecops
🤔 To learn more, visit our website and explore our courses: www.practical-...
📌About Practical DevSecOps:
Practical DevSecOps ​(a Hysn Technologies Inc company) offers vendor-neutral, practical, and hands-on DevSecOps training and certification programs for IT Professionals. Our online training and certifications are focused on modern areas of information security, including DevOps Security, Cloud-Native Security, Cloud Security & Container security. The certifications are achieved after rigorous tests(12-24 hour exams) of skill and are considered the most valuable in the information security field.
For more information, visit: www.practical-devsecops.com or follow us on social media:
👉🏻 Twitter: @PDevsecops
👉🏻 LinkedIn: / 14504770
👉🏻 Facebook: / pdevsecops