Hendrik Ewerlin -- Threat Modeling of Threat Modeling

Robert and Chris talk with Hendrik Ewerlin, a threat modeling advocate and trainer. Hendrik believes you can threat model anything, and he recently applied threat modeling to the process of threat modeling itself. His conclusions are published in the document Threat Modeling of Threat Modeling, where he aims to help practitioners, in his own words, "tame the threats to the threat modeling process. Hendrik Ewerlin loves to build secure software and empower people to do so. He strongly believes in the power of threat modeling. He provides threat modeling training and helps software vendors who are new to threat modeling and want to improve the security of their systems.Connect with Hendrik Ewerlin:→ Hendrik Ewerlin→ Threat Modeling of Threat ModelingMentioned in this episode:→ Hendrik Ewerlin→ Threat Modeling of Threat Modeling→ Austin Kleon books→ Adam Shostack→ Threat Modeling Manifesto→ OWASP SAMMFollow the Application Security Podcast:➜ Home➜ X➜ LinkedIn➜ YouTube➜ Instagram➜ FacebookChapters:00:00 Meet Hendrik Ewerlin: Threat Modeling of Threat Modeling02:44 Exciting adventure called application security04:53 Let them build something when they're, when they're in their teens07:21 Very meta, which I know is a word from a few10:23 Is your approach, uh, to threat modeling and threat modeling programs11:39 Yeah, I did notice that you, you took, you took various14:51 And getting on the same plane. So, I know one of18:11 There some other things that you discovered as you were working20:39 Document. So one of the things, Hendrick, that I noticed about25:01 Yeah, and I love where you went with that. One of27:56 Enough people like me smile. You, so you wrote mitigation debt30:36 All right, three questions. First one is, what's your most controversial32:20 Okay. And the third question is, uh, what's your top book