we45 - Threat Modeling as Code and DevSecOps Training

Instruction Site

Please use the sidebar or this page to access the specific exercises based on the instructor's direction.

• Home

• Using the Labs

  • Lab-System-Instructions
  • Lab-System-FAQs

• Attack Trees

  • Attack Trees - WebApp Lab
  • Attack Trees - IOT Lab

• STRIDE

  • STRIDE

• Trust Boundaries

  • Trust-Boundaries

• Scoring-Your-Threat-Model

  • CVSSv3

• Agile Threat Modeling - Story-Driven

  • Abuser-Stories
  • Threat-Scenario
  • Refutations

• ThreatPlaybook

  • Tour of ThreatPlaybook
  • Automating with ThreatPlaybook
  • ThreatPlaybook Custom Regression