Fundamentals of Secure Software - Introduction to Manual Threat Modeling

The video tutorial delves into manual threat modeling, emphasizing the need for an open mind, a whiteboard, and a collaborative team of experts. It outlines the audience for threat models, including internal teams, pen testers, and clients. The tutorial stresses the importance of a realistic mindset, avoiding Hollywood scenarios, and creating effective mitigations. It also highlights that threat models are living documents that evolve over time. A sample threat model board is demonstrated, using a grid to identify threats and countermeasures, and employing the STRIDE methodology for organization.

What should you do if you identify things that can go wrong during threat modeling?

Describe the sample board layout for a threat model.