November 7°-8° - Belfast & Dublin- ISACA Ireland Chapters 1 Application Threat Modeling Workshop PART III Threat Modeling Demo & Practice

November 7°-8° - Belfast & Dublin- ISACA Ireland Chapters 2 Application Threat Modeling Workshop Threat Modeling Tools  Threat Modeling Analysis and Modeling (TAM) (Microsoft)  Pros: Flexible, Build in Threat & Attack Library  Cons: Not updated-supported, DFD require VISIO ™ installation  SDL Threat Modeling (Microsoft)  Pros: Integrated with SDL, Plug-in in issue tracking, free  Cons: Use STRIDE/DREAD not even used my Microsoft  Trike (open source)  Pros: Flexible, automatic threat generation  Cons: Not scalable, not maintained  PTA (commercial)  Pros: factor business impact of assets  Cons: User need to define threats, vulnerabilities and countermeasures Source :

November 7°-8° - Belfast & Dublin- ISACA Ireland Chapters 3 Application Threat Modeling Workshop Threat Modeler Tool™ Demonstration 1.Threat Modeler live demo session with myAppSecurity Inc (20 minutes) 2.Develop your threat model con threatModeler ™ with PASTA™ (30 minutes)

November 7°-8° - Belfast & Dublin- ISACA Ireland Chapters 4 Application Threat Modeling Workshop Threat Modeling Example : Mobile Payment Application

November 7°-8° - Belfast & Dublin- ISACA Ireland Chapters 5 Application Threat Modeling Workshop Define Requirements

November 7°-8° - Belfast & Dublin- ISACA Ireland Chapters 6 Application Threat Modeling Workshop Application Functional Decomposition

November 7°-8° - Belfast & Dublin- ISACA Ireland Chapters 7 Application Threat Modeling Workshop Security-Design Assertion

November 7°-8° - Belfast & Dublin- ISACA Ireland Chapters 8 Application Threat Modeling Workshop Threat Analysis

November 7°-8° - Belfast & Dublin- ISACA Ireland Chapters 9 Application Threat Modeling Workshop Threat –Controls-Vulnerability Analysis at Component Level

November 7°-8° - Belfast & Dublin- ISACA Ireland Chapters 10 Application Threat Modeling Workshop Vulnerability Analysis

November 7°-8° - Belfast & Dublin- ISACA Ireland Chapters 11 Application Threat Modeling Workshop Attack-Threat Tree Modeling

November 7°-8° - Belfast & Dublin- ISACA Ireland Chapters 12 Application Threat Modeling Workshop Risk Analysis And Management

November 7°-8° - Belfast & Dublin- ISACA Ireland Chapters 13 Application Threat Modeling Workshop Q & Q U E S T I O N S A N S W E R S

November 7°-8° - Belfast & Dublin- ISACA Ireland Chapters 14 Application Threat Modeling Workshop Thanks for Your Attention me : Marco (dot) M (dot) Morana (at) Citi (dot) com Follow me on Preorder the book “Application Threat Modeling Book, Wiley-Blackwell” on Amazon Modeling-Marco-Morana/dp/