DCSG1 - Conquering the Flames of Threat Modeling Crash Course OWASP Threat Dragon - Donavan Cheah

""Know thy self, know thy enemy. A thousand battles, a thousand victories." - Sun Tzu "Prevention is better than cure." In essence, these two quotes summarise threat modelling. But threat modelling can sound intimidating to the first-timer. In the lightning talk, I will describe how OWASP Threat Dragon can be used as the centre to teach threat modeling in a simple, diagrammatic way. I have taught this in multiple camps in the region, such as the Global Cybersecurity Camp in Taiwan, Seasides at Goa, and SINCON.