Continuous Security: Threat Modeling in DevSecOps
bishopfox.com | blog | #appsec | #devsecops | #ci-cd | #threat-modeling | #continuous-security | #secure-design
Summary
A primer on threat modeling in DevSecOps: modeling the app as an attacker sees it addresses design and architecture security, with plain definitions and warnings against formalism overload.
- Published
- Collected
--- id: 4042 title: "Continuous Security: Threat Modeling in DevSecOps" source_domain: bishopfox.com source_url: "https://bishopfox.com/blog/threat-modeling-in-devsecops" published_at: "2021-11-08T00:00:00Z" tags: ["appsec", "devsecops", "ci-cd", "threat-modeling", "continuous-security", "secure-design"] phying_url: "https://phying.com/item/4042" lang: en --- # Continuous Security: Threat Modeling in DevSecOps ## Summary A primer on threat modeling in DevSecOps: modeling the app as an attacker sees it addresses design and architecture security, with plain definitions and warnings against formalism overload. ## Intelligence Metadata - **Sources:** bishopfox.com - **Published:** 2021-11-08T00:00:00Z - **Original:** https://bishopfox.com/blog/threat-modeling-in-devsecops - **Phying News:** https://phying.com/item/4042