Building a Valid Threat Library for Cloud Based Applications - Tony Ucedavelez
Channel: OWASP Foundation
Date: 2019-08-10

OWASP AppSec EU 2018 DevOps Track - Day 2, talk 4

Tapping the power of various inherent cloud monitoring and log components in order to build a dynamic threat library that can substantiate your threat model is very possible.  In this talk we'll look at both Azure and AWS compnents to leverage when adding threat context and ultimately an amazing threat library to your application threat model. We'll look at exemplifying these techniques across mission critical infrastructure in Energy and Transportation.

Managed by the official OWASP Media Project https://www.owasp.org/index.php/OWASP_Media_Project