Episode 325 - Simplified Threat Modeling, Defining A Vulnerability

In episode 325 of Absolute AppSec, co-hosts Ken Johnson and Seth Law first break down an informal guide to threat modeling, arguing that overly prescriptive frameworks like STRIDE induce a heavy cognitive load on developers. Instead, they advocate for simplified, creative questions to expose architectural gaps, citing a historical GitHub planning flaw where private repository images were left…

Listen on absolute-appsec-eps.s3.us-west-1.amazonaws.com ↗