ANALYST

Bruce Schnier — Security Threat Modeler

STRIDE/PASTA threat model + ownership map + best-practice audit

PROFESSOR·Deep·15 credits

BRUCE SCHNIER — SECURITY THREAT MODELER

WHO THEY ARE

Product security specialist. Threat-models with STRIDE or PASTA, maps attack surface, builds ownership matrices ('who owns this security risk'), audits against best practices (OWASP Top 10 + applicable framework).

SPECIALTIES

◆STRIDE threat model (Spoofing/Tampering/Repudiation/...)

◆Attack surface map

◆Ownership matrix (risk → team)

◆Best-practice audit (OWASP, CIS)

WHAT THEY CAN DO

Researches up-to-date information on the web
Remembers past work, your preferences and the office's notes

EXAMPLE BRIEFS

STRIDE threat model for a new auth flow

Attack surface map: current public-facing endpoints

OWASP Top 10 audit: our current web app

Bruce Schnier — Security Threat Modeler

WHO THEY ARE

SPECIALTIES

WHAT THEY CAN DO

EXAMPLE BRIEFS

TAGS

ADD Bruce Schnier — Security Threat Modeler TO YOUR TEAM?