31 mintranscript
Tony UV -- Threat Libraries in the Cloud
A list of weaknesses is not the same thing as an understanding of the threats facing a business.
Listen to the episodeGuest
Tony UcedaVelez
Tony UcedaVelez, who usually goes by Tony UV, is the founder and CEO of VerSprite, a global security consulting firm based in Atlanta, Georgia. He leads the OWASP Atlanta chapter and BSides Atlanta, and created the PASTA threat modeling methodology.
2 episodes
39 mintranscript
Tony UcedaVelez -- PASTA: Not Just for Breakfast Anymore
A useful threat model should explain how an attacker could harm the business, not just complete a checklist.
Listen to the episode