Troy Bowman
Troy has spent the last 4 years working alongside a group of highly talented Information security professionals at a fortune 15 company. Prior to trekking through the trenches of threat modeling and application security, he spent 6 years enlisted in the United States Navy as a Fire Controlman, operating, repairing and maintaining some of the most valuable IT assets found on a Naval Warship. While he may not be 100% sure on a few things in life, (What to have for lunch? Should I really have that extra Cinnabon?) He is absolutely certain that threat modeling is not something to “shrug off” or avoid and it can be done at scale!
Troy enjoys spending time with his wife and two kids and is an avid video gamer, dog lover, beer drinker, and man of science. He is passionate about his future in InfoSec and is ready to keep his love for this industry going by bringing his knowledge, passion, and expertise to a new level with his upcoming company Threat Archer - Cyber Security Solutions LLC.
Session
It has been revealed that 85% of developers have admitted to deploying an application with 10 or more vulnerabilities. These are ticking time bombs waiting to be exploited with unknown blast radiuses.The goal of this discussion is to empower developers and solution architects with the magic of threat modeling at scale to make the daunting effort of a secure application seem much more attainable.
In this discussion we will briefly walk through what threat modeling is and deep dive into how to perform threat modeling at scale. We will discuss the immense benefits to security it can provide as well as the time and money it can save. The act of threat modeling should not be looked at as a time consuming process that holds little to no value but rather a key step in application design and the cornerstone on which you start the build process. Take the time now, to save exponentially more time and money later.