What is the OWASP Threat Dragon?

Exploring Information Security - Timothy De Block

Content provided by Timothy De Block. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Timothy De Block or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://player.fm/legal.

7y ago 28:53

MP3•Episode home

Archived series ("Inactive feed" status)

When? This feed was archived on March 05, 2021 06:10 (3+ y ago). Last successful fetch was on June 08, 2020 23:08 (4+ y ago)

Why? Inactive feed status. Our servers were unable to retrieve a valid podcast feed for a sustained period.

What now? You might be able to find a more up-to-date version using the search function. This series will no longer be checked for updates. If you believe this to be in error, please check if the publisher's feed link below is valid and contact support to request the feed be restored or if you have any other concerns about this.

In this fire-breathing edition of the Exploring Information Security podcast, I talk to Mike Goodwin the project lead of the OWASP Threat Dragon.

Mike (@theblacklabguy) joins me to discuss his OWASP project Threat Dragon. The project is meant to give developers an easy use tool for performing threat modeling. The project is built on NodeJS and AngularJS. It has a slick easy-to-use interface and Github integration. His roadmap for the project include Bitbucket integration and a rule engine that will help with threat modeling.

In this episode we discuss:

What is threat modeling?
What led to the idea of Threat Dragon?
How does someone get started with the tool?
What's the effort on a project like this? (mike[dot]goodwing[at]owasp[dot]org to help)

More resources:

Threat Modeling: Designing for Security by Adam Shostack

[RSS Feed] [iTunes]

121 episodes

#Tech #InfoSec #Information #Security #Cyber #Technology #Computer #Timothy De Block