Adam Shostack — Remote Threat Modeling

Adam joins us to discuss remote threat modeling, and we do a live threat modeling exercise to figure out how remote threat modeling actually works. On this episode of the Application Security Podcast, Robert and I are joined by Adam Shostack, and the topic we discuss is remote threat modeling. We're all living in this new world where we're working from home or we're sheltering at home, and the question we pose is, how are we still going to make progress on rolling out threat modeling when we can't meet with people face-to-face and work directly on a whiteboard? So we hope you enjoy this special episode of the Application Security Podcast with— Adam Shostack.The Application Security Podcast is brought to you by Security Journey.About Security JourneyOn this episode of the Application Security Podcast, Robert and I are joined by Adam Shostack, and the topic we discuss is remote threat modeling.→ Learn more about Security JourneyConnect with Adam Shostack:→ Shostack + Associates→ Adam ShostackMentioned in this episode:→ Shostack + Associates→ Adam Shostack→ OWASP Threat Dragon Project→ OWASP SlackFollow the Application Security Podcast:➜ Home➜ X➜ LinkedIn➜ YouTube➜ Instagram➜ FacebookChapters:00:00 Meet Adam Shostack: Adam Shostack — Remote Threat Modeling01:52 So we find ourselves right now recording this episode. The date05:20 Are some of the tools What are some of the tools07:57 So we'll— yeah, we can add in a couple of different10:10 So then we have a lock activator. So it's making me15:51 Yeah, so you're trying to minimize the friction of the tool17:13 I think the takeaway there for our listeners that might be19:35 Yeah, and I'm a fan of Aries Risk from Continuum as22:08 Yeah. So let's come back around now to some of Robert's24:20 Yeah, and I hear both. I hear sometimes, no, not so26:12 That makes me think as a teacher of threat modeling, Something