Tag: threat modeling
The Risk Profile of AI-Driven Development
Ilkka Turunen | | AI-generated code, AIBOM, autonomous development, autonomous security, challenge bottleneck, CI CD gating, cloud-native security, Dependency Management, GRC engineering, hallucinations, IDE controls, license compliance, machine speed enforcement, OpenSSF Gemara, Outdated Dependencies, policy based dependency selection, prompt level governance, review bottleneck, runtime transparency, SBoM, secure by default, shift left security, Software Supply Chain, threat modeling, transitive dependencies, trusted registries, typosquattingAnalysis arguing that AI-driven code generation accelerates dependency decisions and expands supply-chain risk, requiring shift-left governance, prompt-level controls, automated SBOM/AIBOM visibility, threat-modeling as engineering, and autonomous security to match autonomous development ...
Secure By Design, Secure by Default
Julian Browne | | adaptive security, continuous improvement, continuous security, cyber resilience, devops, devops best practices, devsecops, dynamic systems, embedded security, enterprise compliance, incident response, modern software delivery, production monitoring, real-time security, secure by default, secure coding, secure-by-design, security governance, security in production, security strategy, security theatre, shift left security, software security, static analysis, threat modeling“Shift left” alone won’t secure software. Real security must be embedded continuously across design, development, and production—not just moved earlier ...
Elevating DevOps Security: Why Integrating Threat Modeling Transforms Pentesting
Akhil Mittal | | application security, devops security, pentesting, Risk-based security testing, threat modelingDo not stop at compliance — embrace threat-driven pentesting and build a security posture that is ready for the real-world threats your organization faces ...
Implementing Threat Modeling in a DevOps Workflow
Integrating threat modeling into the DevOps workflow is essential to identify and mitigate potential security threats ...
Where to Start With Secure Design – Tips for Developers
Designing secure software is an increasingly hot topic, and for good reason. In recent weeks, we’ve seen a global effort from governments and cybersecurity agencies to encourage security by design through new ...
Threat Modeling as a DevSecOps Practice
Software engineers are always under pressure to build more software, faster. At the same time, there is increasing regulatory and market pressure for secure software that meets users’ and regulators’ requirements for ...
Game On: Secure Coding Virtual Summit 2021
Veronica Haggar | | API security, application security, appsec, container security, cybersecurity event, devsecops, DevSecOps event, secure coding, threat modelingAgile organizations are looking for ways to win at security without slowing down their release cycles. That’s where DevSecOps comes in. The days of a hands-off security approach for developers are over ...
How to Secure Online Coding Platforms
David Fiser | | AWS Cloud9, cloud, coding, coding platforms, IDE, Integrated Development Environments, threat modeling, visual studio online, VS CodeThreat Modeling for Online Coding Platforms The evolution of DevOps teams and a greater reliance on cloud-based computing has completely changed the coding process. Now, with Integrated Development Environments (IDEs), coding can ...
Threat Modeling: The Why, How, When and Which Tools
You may have heard of threat modeling as a structured activity for identifying and managing threats. Threat modeling can be applied to a wide range of things, including software, applications, systems, networks, ...
