{"id":14977,"date":"2024-02-22T02:57:57","date_gmt":"2024-02-22T02:57:57","guid":{"rendered":"https:\/\/conference.hitb.org\/hitbsecconf2024auh\/product\/agile-whiteboard-hacking-aka-hands-on-threat-modeling-auh2024\/"},"modified":"2024-02-29T03:25:36","modified_gmt":"2024-02-29T03:25:36","slug":"agile-whiteboard-hacking-aka-hands-on-threat-modeling-auh2024","status":"publish","type":"product","link":"https:\/\/conference.hitb.org\/hitbsecconf2024auh\/product\/agile-whiteboard-hacking-aka-hands-on-threat-modeling-auh2024\/","title":{"rendered":"Agile Whiteboard Hacking \u2013 aka Hands-on Threat Modeling"},"content":{"rendered":"

ATTEND IN-PERSON<\/span>: <\/strong>Onsite at Abu Dhabi<\/strong><\/h4>\n
\n
\n
\n
\n
\n
\n

DATE: 25-26 Nov 2024<\/strong><\/h4>\n

TIME: 09:00 to 17:00 GST\/GMT+4<\/strong><\/h4>\n\n\n\n\n\n
Date<\/strong><\/td>\nDay<\/strong><\/td>\nTime<\/strong><\/td>\nDuration<\/strong><\/td>\n<\/tr>\n
25 Nov<\/td>\nMonday<\/td>\n09:00 to 17:00 GST\/GMT+4<\/td>\n8 Hours<\/td>\n<\/tr>\n
26 Nov<\/td>\nTuesday<\/td>\n09:00 to 17:00 GST\/GMT+4<\/td>\n8 Hours<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
\n
Participants get access to the on-demand Threat Modeling Introduction training prior to the training, and one hour of threat modeling coaching after the training<\/span><\/em><\/h5>\n
\n
You will be challenged with hands-on threat modeling exercises based on real-world projects. You will get insight into our practical industry experience, helping you to become a Threat Modeling Practitioner. We included an exercise on MITRE ATT&CK, and we focus on embedding threat modeling in Agile and DevOps practices.<\/h5>\n

We levelled up the threat modeling war game. Engaged in CTF-style challenges, your team will battle for control over an offshore wind turbine park.<\/p>\n

The level of this training is Beginner\/Intermediate. Participants who are new to threat modeling are advised to follow our self-paced Threat Modeling Introduction training (which is about 2 hours and is included in this training).<\/p>\n

As highly skilled professionals with years of experience under our belts, we’re intimately familiar with the gap between academic knowledge of threat modeling and real-world practice. To minimize that gap, we have developed practical use cases, based on real-world projects. Each use case includes a description of the environment, together with questions and templates to build a threat model.<\/p>\n

Students will be challenged in groups of 3 to 4 people to perform the different stages of threat modeling:<\/p>\n

\u2022 Diagram techniques applied on a travel booking service
\n\u2022 Threat model a cloud-based update service for an IoT kiosk
\n\u2022 Create an attack tree against a nuclear research facility
\n\u2022 Create a SOC Risk Based Alerting system with MITRE ATT&CK
\n\u2022 Mitigate threats in a payment service build with microservices and S3 buckets
\n\u2022 Apply data protection by design and default on a loyalty app
\n\u2022 Apply the OWASP Threat Modeling Playbook on agile development
\n\u2022 Threat modeling the CI\/CD pipeline
\n\u2022 Battle for control over “Zwarte Wind”, an offshore wind turbine park<\/p>\n

After each hands-on exercise, the results are discussed, and students receive a documented solution. All participants get our Threat Modeling Playbook to improve you threat modeling practice, and a one-year access to our online threat modeling learning platform.<\/p>\n

As part of this training, you will be asked to create and submit your own threat model, on which you will get feedback. One month after the training we organize an individual coaching session with all the participants.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

 <\/p>\n

Your bonus training package includes:<\/strong><\/h5>\n

\u2022 Following a successful evaluation of your own threat model: Threat Modeling Expert certificate
\n\u2022 One year of access to our threat modeling e-learning platform
\n\u2022 Presentation handouts
\n\u2022 Tailored use case worksheets
\n\u2022 Detailed use case solution descriptions
\n\u2022 Threat model documentation template
\n\u2022 Template for calculating identified threat risk severity
\n\u2022 Threat modeling playbook
\n\u2022 STRIDE mapped on compliance standards<\/p>\n

 <\/p>\n

We plan 9 hands-on exercises:<\/strong><\/h5>\n

\u2022 Diagram techniques applied on a travel booking service
\n\u2022 Threat model a cloud-based update service for an IoT kiosk
\n\u2022 Create an attack tree against a nuclear research facility
\n\u2022 Create a SOC Risk Based Alerting system with MITRE ATT&CK
\n\u2022 Mitigate threats in a payment service build with microservices and S3 buckets
\n\u2022 Apply data protection by design and default on a loyalty app
\n\u2022 Apply the OWASP Threat Modeling Playbook on agile development
\n\u2022 Threat modeling the CI\/CD pipeline
\n\u2022 Battle for control over “Zwarte Wind”, an offshore wind turbine park
\nAt least 60% of the training will be exercises.<\/em><\/p>\n

 <\/p>\n

Key Learning Objectives<\/strong><\/h5>\n
    \n
  • Cover the 4 main steps of creating and updating an effective threat model<\/li>\n
  • Use threat modeling as part of the secure design of systems and to scope pen-testing more efficiently<\/li>\n
  • Use threat modeling to learn, model and communicate with security and development teams and build bridges between them.<\/li>\n<\/ul>\n

     <\/p>\n

    Topics Covered<\/strong><\/h5>\n

    Threat modeling introduction<\/strong>
    \n\u2022 Threat modeling in a secure development lifecycle
    \n\u2022 What is threat modeling?
    \n\u2022 Why perform threat modeling?
    \n\u2022 Threat modeling stages
    \n\u2022 Different threat modeling methodologies
    \n\u2022 Document a threat model<\/p>\n

    Diagrams \u2013 what are you building?<\/strong>
    \n\u2022 Understanding context
    \n\u2022 Doomsday scenarios
    \n\u2022 Data flow diagrams
    \n\u2022 Trust boundaries
    \n\u2022 Sequence and state diagrams
    \n\u2022 Advanced diagrams
    \n\u2022 Hands-on: Diagram techniques applied on a travel booking service<\/p>\n

     <\/p>\n

    Identifying threats \u2013 what can go wrong?<\/strong>
    \n\u2022 STRIDE introduction
    \n\u2022 STRIDE threats
    \n\u2022 Hands-on: Threat model a cloud-based update service for an IoT kiosk
    \n\u2022 Attack trees
    \n\u2022 Hands-on: Create an attack tree against a nuclear research facility
    \n\u2022 Attack libraries
    \n\u2022 MITRE ATT&CK
    \n\u2022 Hands-on: Create a SOC Risk Based Alerting system with MITRE ATT&CK<\/p>\n

     <\/p>\n

    Addressing each threat<\/strong>
    \n\u2022 How to address threats
    \n\u2022 Mitigation patterns
    \n\u2022 Value of standard mitigations
    \n\u2022 Setting priorities through risk calculation
    \n\u2022 Risk management
    \n\u2022 Threat agents
    \n\u2022 The mitigation process
    \n\u2022 Hands-on: Mitigate threats in a payment service build with microservices and S3 buckets<\/p>\n

     <\/p>\n

    Threat modeling and compliance<\/strong>
    \n\u2022 How to marry threat modeling with compliance
    \n\u2022 GDPR and Privacy by design
    \n\u2022 Privacy threats
    \n\u2022 LINDUNN and Mitigating privacy threats
    \n\u2022 Threat modeling medical devices
    \n\u2022 Threat modeling Industrial Control Systems (IEC 62443)
    \n\u2022 Threat Assessment and Remediation Analysis for automotive (TARA, SAE 21434)
    \n\u2022 Mapping threat modeling on compliance frameworks
    \n\u2022 Hands-on: Apply data protection by design and default on a loyalty app<\/p>\n

     <\/p>\n

    Advanced threat modeling<\/strong>
    \n\u2022 Typical steps and variations
    \n\u2022 Validation threat models
    \n\u2022 Effective threat model workshops
    \n\u2022 Communicating threat models
    \n\u2022 Agile and DevOps threat modeling
    \n\u2022 Improving your practice with the Threat Modeling Playbook
    \n\u2022 Scaling up threat modeling
    \n\u2022 Hands-on: Apply the OWASP Threat Modeling Playbook on agile development
    \n\u2022 Hands-on: Threat modeling the CI\/CD pipeline<\/p>\n

     <\/p>\n

    Threat modeling resources<\/strong>
    \n\u2022 Open-Source tools
    \n\u2022 Commercial tools
    \n\u2022 General tools
    \n\u2022 Threat modeling tools compared<\/p>\n

     <\/p>\n

    Examination<\/strong>
    \n\u2022 Hands-on examination
    \n\u2022 Grading and certification
    \nBattle for control over “Zwarte Wind”, an offshore wind turbine park<\/em>
    \nRed team versus Blue team battle for control over an offshore wind turbine park<\/em><\/p>\n

     <\/p>\n

    Review session (online coaching session after 1 month)<\/strong>
    \n\u2022 Hand-in of your own threat model
    \n\u2022 Individual feedback on your threat model
    \n\u2022 Review session<\/p>\n","protected":false},"excerpt":{"rendered":"

    ATTEND IN-PERSON: Onsite at Abu Dhabi DATE: 25-26 Nov 2024 TIME: 09:00 to 17:00 GST\/GMT+4 Date Day Time Duration 25 Nov Monday 09:00 to 17:00 GST\/GMT+4 8 Hours 26 Nov Tuesday 09:00 to 17:00 GST\/GMT+4 8 Hours Participants get access to the on-demand Threat Modeling Introduction training prior to the training, and one hour of […]<\/p>\n","protected":false},"featured_media":14976,"template":"","meta":{"_acf_changed":false},"product_cat":[58,90,92,57],"product_tag":[],"class_list":{"0":"post-14977","1":"product","2":"type-product","3":"status-publish","4":"has-post-thumbnail","6":"product_cat-2-day-training","7":"product_cat-auh2024","8":"product_cat-auh2024-training","9":"product_cat-in-person","11":"first","12":"outofstock","13":"featured","14":"shipping-taxable","15":"purchasable","16":"product-type-simple"},"acf":[],"yoast_head":"\nAgile Whiteboard Hacking \u2013 aka Hands-on Threat Modeling - HITBSecConf2024 - Abu Dhabi<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/conference.hitb.org\/hitbsecconf2024auh\/product\/agile-whiteboard-hacking-aka-hands-on-threat-modeling-auh2024\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Agile Whiteboard Hacking \u2013 aka Hands-on Threat Modeling - HITBSecConf2024 - Abu Dhabi\" \/>\n<meta property=\"og:description\" content=\"ATTEND IN-PERSON: Onsite at Abu Dhabi DATE: 25-26 Nov 2024 TIME: 09:00 to 17:00 GST\/GMT+4 Date Day Time Duration 25 Nov Monday 09:00 to 17:00 GST\/GMT+4 8 Hours 26 Nov Tuesday 09:00 to 17:00 GST\/GMT+4 8 Hours Participants get access to the on-demand Threat Modeling Introduction training prior to the training, and one hour of […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/conference.hitb.org\/hitbsecconf2024auh\/product\/agile-whiteboard-hacking-aka-hands-on-threat-modeling-auh2024\/\" \/>\n<meta property=\"og:site_name\" content=\"HITBSecConf2024 - Abu Dhabi\" \/>\n<meta property=\"article:modified_time\" content=\"2024-02-29T03:25:36+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/conference.hitb.org\/hitbsecconf2024auh\/wp-content\/uploads\/sites\/23\/2024\/02\/sebastien-deleersnyder-product-photo.png\" \/>\n\t<meta property=\"og:image:width\" content=\"512\" \/>\n\t<meta property=\"og:image:height\" content=\"335\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/conference.hitb.org\/hitbsecconf2024auh\/product\/agile-whiteboard-hacking-aka-hands-on-threat-modeling-auh2024\/\",\"url\":\"https:\/\/conference.hitb.org\/hitbsecconf2024auh\/product\/agile-whiteboard-hacking-aka-hands-on-threat-modeling-auh2024\/\",\"name\":\"Agile Whiteboard Hacking \u2013 aka Hands-on Threat Modeling - HITBSecConf2024 - Abu Dhabi\",\"isPartOf\":{\"@id\":\"https:\/\/conference.hitb.org\/hitbsecconf2024auh\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/conference.hitb.org\/hitbsecconf2024auh\/product\/agile-whiteboard-hacking-aka-hands-on-threat-modeling-auh2024\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/conference.hitb.org\/hitbsecconf2024auh\/product\/agile-whiteboard-hacking-aka-hands-on-threat-modeling-auh2024\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/conference.hitb.org\/hitbsecconf2024auh\/wp-content\/uploads\/sites\/23\/2024\/02\/sebastien-deleersnyder-product-photo.png\",\"datePublished\":\"2024-02-22T02:57:57+00:00\",\"dateModified\":\"2024-02-29T03:25:36+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/conference.hitb.org\/hitbsecconf2024auh\/product\/agile-whiteboard-hacking-aka-hands-on-threat-modeling-auh2024\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/conference.hitb.org\/hitbsecconf2024auh\/product\/agile-whiteboard-hacking-aka-hands-on-threat-modeling-auh2024\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/conference.hitb.org\/hitbsecconf2024auh\/product\/agile-whiteboard-hacking-aka-hands-on-threat-modeling-auh2024\/#primaryimage\",\"url\":\"https:\/\/conference.hitb.org\/hitbsecconf2024auh\/wp-content\/uploads\/sites\/23\/2024\/02\/sebastien-deleersnyder-product-photo.png\",\"contentUrl\":\"https:\/\/conference.hitb.org\/hitbsecconf2024auh\/wp-content\/uploads\/sites\/23\/2024\/02\/sebastien-deleersnyder-product-photo.png\",\"width\":512,\"height\":335},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/conference.hitb.org\/hitbsecconf2024auh\/product\/agile-whiteboard-hacking-aka-hands-on-threat-modeling-auh2024\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/conference.hitb.org\/hitbsecconf2024auh\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Shop\",\"item\":\"https:\/\/conference.hitb.org\/hitbsecconf2024auh\/shop\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Agile Whiteboard Hacking \u2013 aka Hands-on Threat Modeling\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/conference.hitb.org\/hitbsecconf2024auh\/#website\",\"url\":\"https:\/\/conference.hitb.org\/hitbsecconf2024auh\/\",\"name\":\"HITBSecConf2024 - Abu Dhabi\",\"description\":\"Nov 25 - 28, Abu Dhabi, UAE\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/conference.hitb.org\/hitbsecconf2024auh\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Agile Whiteboard Hacking \u2013 aka Hands-on Threat Modeling - HITBSecConf2024 - Abu Dhabi","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/conference.hitb.org\/hitbsecconf2024auh\/product\/agile-whiteboard-hacking-aka-hands-on-threat-modeling-auh2024\/","og_locale":"en_US","og_type":"article","og_title":"Agile Whiteboard Hacking \u2013 aka Hands-on Threat Modeling - HITBSecConf2024 - Abu Dhabi","og_description":"ATTEND IN-PERSON: Onsite at Abu Dhabi DATE: 25-26 Nov 2024 TIME: 09:00 to 17:00 GST\/GMT+4 Date Day Time Duration 25 Nov Monday 09:00 to 17:00 GST\/GMT+4 8 Hours 26 Nov Tuesday 09:00 to 17:00 GST\/GMT+4 8 Hours Participants get access to the on-demand Threat Modeling Introduction training prior to the training, and one hour of […]","og_url":"https:\/\/conference.hitb.org\/hitbsecconf2024auh\/product\/agile-whiteboard-hacking-aka-hands-on-threat-modeling-auh2024\/","og_site_name":"HITBSecConf2024 - Abu Dhabi","article_modified_time":"2024-02-29T03:25:36+00:00","og_image":[{"width":512,"height":335,"url":"https:\/\/conference.hitb.org\/hitbsecconf2024auh\/wp-content\/uploads\/sites\/23\/2024\/02\/sebastien-deleersnyder-product-photo.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/conference.hitb.org\/hitbsecconf2024auh\/product\/agile-whiteboard-hacking-aka-hands-on-threat-modeling-auh2024\/","url":"https:\/\/conference.hitb.org\/hitbsecconf2024auh\/product\/agile-whiteboard-hacking-aka-hands-on-threat-modeling-auh2024\/","name":"Agile Whiteboard Hacking \u2013 aka Hands-on Threat Modeling - HITBSecConf2024 - Abu Dhabi","isPartOf":{"@id":"https:\/\/conference.hitb.org\/hitbsecconf2024auh\/#website"},"primaryImageOfPage":{"@id":"https:\/\/conference.hitb.org\/hitbsecconf2024auh\/product\/agile-whiteboard-hacking-aka-hands-on-threat-modeling-auh2024\/#primaryimage"},"image":{"@id":"https:\/\/conference.hitb.org\/hitbsecconf2024auh\/product\/agile-whiteboard-hacking-aka-hands-on-threat-modeling-auh2024\/#primaryimage"},"thumbnailUrl":"https:\/\/conference.hitb.org\/hitbsecconf2024auh\/wp-content\/uploads\/sites\/23\/2024\/02\/sebastien-deleersnyder-product-photo.png","datePublished":"2024-02-22T02:57:57+00:00","dateModified":"2024-02-29T03:25:36+00:00","breadcrumb":{"@id":"https:\/\/conference.hitb.org\/hitbsecconf2024auh\/product\/agile-whiteboard-hacking-aka-hands-on-threat-modeling-auh2024\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/conference.hitb.org\/hitbsecconf2024auh\/product\/agile-whiteboard-hacking-aka-hands-on-threat-modeling-auh2024\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/conference.hitb.org\/hitbsecconf2024auh\/product\/agile-whiteboard-hacking-aka-hands-on-threat-modeling-auh2024\/#primaryimage","url":"https:\/\/conference.hitb.org\/hitbsecconf2024auh\/wp-content\/uploads\/sites\/23\/2024\/02\/sebastien-deleersnyder-product-photo.png","contentUrl":"https:\/\/conference.hitb.org\/hitbsecconf2024auh\/wp-content\/uploads\/sites\/23\/2024\/02\/sebastien-deleersnyder-product-photo.png","width":512,"height":335},{"@type":"BreadcrumbList","@id":"https:\/\/conference.hitb.org\/hitbsecconf2024auh\/product\/agile-whiteboard-hacking-aka-hands-on-threat-modeling-auh2024\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/conference.hitb.org\/hitbsecconf2024auh\/"},{"@type":"ListItem","position":2,"name":"Shop","item":"https:\/\/conference.hitb.org\/hitbsecconf2024auh\/shop\/"},{"@type":"ListItem","position":3,"name":"Agile Whiteboard Hacking \u2013 aka Hands-on Threat Modeling"}]},{"@type":"WebSite","@id":"https:\/\/conference.hitb.org\/hitbsecconf2024auh\/#website","url":"https:\/\/conference.hitb.org\/hitbsecconf2024auh\/","name":"HITBSecConf2024 - Abu Dhabi","description":"Nov 25 - 28, Abu Dhabi, UAE","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/conference.hitb.org\/hitbsecconf2024auh\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/conference.hitb.org\/hitbsecconf2024auh\/wp-json\/wp\/v2\/product\/14977"}],"collection":[{"href":"https:\/\/conference.hitb.org\/hitbsecconf2024auh\/wp-json\/wp\/v2\/product"}],"about":[{"href":"https:\/\/conference.hitb.org\/hitbsecconf2024auh\/wp-json\/wp\/v2\/types\/product"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/conference.hitb.org\/hitbsecconf2024auh\/wp-json\/wp\/v2\/media\/14976"}],"wp:attachment":[{"href":"https:\/\/conference.hitb.org\/hitbsecconf2024auh\/wp-json\/wp\/v2\/media?parent=14977"}],"wp:term":[{"taxonomy":"product_cat","embeddable":true,"href":"https:\/\/conference.hitb.org\/hitbsecconf2024auh\/wp-json\/wp\/v2\/product_cat?post=14977"},{"taxonomy":"product_tag","embeddable":true,"href":"https:\/\/conference.hitb.org\/hitbsecconf2024auh\/wp-json\/wp\/v2\/product_tag?post=14977"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}