isabella232 / threat-modeling-training

Segment's Threat Modeling training for our engineers

Threat Modeling Training

This is the public version of the Threat Modeling training run at Segment. The goal of the training is to teach the individual engineers how to threat model, so that they can run the threat modeling sessions themselves.

There are three parts to the training.

Introduction to Threat Modeling

The goal of the first training session is to introduce the concept of threat modeling, teach the workflow, and show developers the tools Security uses to find vulnerabilities.

Foundations of Threat Modeling

The goal of the second training is to get the developer’s hands dirty with exercises to solidify their knowledge.

Live Threat Modeling

The goal of the final training is to perform an end-to-end threat modeling session with the team to cement the concepts that we have previously discussed.

Feedback

We have a strong sense of community here at Segment and in addition to sharing our training slides, we have an email address so you can submit your questions and thoughts about the program. We are always interested in hearing feedback, good or bad!

Email address: [email protected]