Threat Modeling Techniques in Defense Cybersecurity

Threat modeling is one of cybersecurity's most valuable practices, and one of the most skipped. Xander Keele (Director of Solution Architecture) and Greg Vanore (Director of Software Engineering) join host Matt Triner to break down frameworks like STRIDE and PASTA, why developers push back on it, and how to get buy-in without falling into pure theory. They also dig into how AI is changing the pace of both attacks and defenses. Episode Chapters: 00:00 Introduction to Threat Modeling in Cybersecurity 02:12 Defining Threat Modeling and Its Overlooked Nature 07:13 The Role of Risk Assessment in Threat Modeling 12:09 Social Skills in Threat Modeling and Development 22:06 Higher-Level Threat Modeling and Industry Context 24:45 Real-World Applications of Threat Modeling Techniques 31:49 Enhancing Threat Models with Market Insights 34:10 The Role of Market Share in Risk Assessment 36:36 Contractual Implications of Threat Modeling 41:34 Integrating Threat Modeling into Development Culture 52:02 Adapting Threat Modeling for Emerging Technologies