practitionerThreat Modeling
Give developers high-confidence checks first
Said by Brook Schoenfield ·
“If you reduce to start off, your baseline is your suite of high confidence checkers, and you hand those to developers— I've done this a bunch of times now and it works— hand those to developers and say, here, especially if you can get that on their desktop so while they're coding they can check, then you're using the tool in the way the developer wants to see, like a compiler.”
Transcript evidence from Brook Schoenfield — Security is a messy problem.