segmentio / threat-modeling-training

Related projects: ⓘ

• edgeroute / security-champion-framework
  The Security Champion Framework provides both a measuring stick and a roadmap generator for Champion Programs.
  ☆102Updated 8 months ago
• Autodesk / continuous-threat-modeling
  A Continuous Threat Modeling methodology
  ☆303Updated 2 years ago
• jeevan-singh / Security-Engineering-Training
  ☆30Updated 3 years ago
• tadwhitaker / Security_Architect_and_Principal_Security_Engineer_Interview_Questions
  This is a companion to the Security Engineer Questions
  ☆196Updated 9 months ago
• iriusrisk / OpenThreatModel
  The Open Threat Modeling Format (OTM) defines a platform independent way to define the threat model of any system.
  ☆165Updated 7 months ago
• threatspec / threatspec
  threatspec - continuous threat modeling, through code
  ☆327Updated 3 years ago
• absoluteappsec / handouts
  materials we hand out
  ☆127Updated last week
• OWASP / threat-model-cookbook
  This project is about creating and publishing threat model examples.
  ☆402Updated 2 years ago
• mllamazares / STRIDE-vs-ASVS
  🖇️ STRIDE vs. ASVS equivalence table
  ☆73Updated 3 weeks ago
• BlazingWind / OWASP-ASVS-4.0-testing-guide
  ☆118Updated 10 months ago
• secmerc / materialize-threats
  ☆60Updated last year
• we45 / ThreatPlaybook
  A unified DevSecOps Framework that allows you to go from iterative, collaborative Threat Modeling to Application Security Test Orchestrat…
  ☆271Updated last week
• Toreon / threat-model-playbook
  ☆77Updated 3 years ago
• c0rdis / security-champions-playbook
  Security Champions Playbook v 2.1
  ☆341Updated 11 months ago
• threatcl / threatcl
  Documenting your Threat Models with HCL
  ☆397Updated 2 weeks ago
• Santandersecurityresearch / asvs
  A simple web app that helps developers understand the ASVS requirements.
  ☆153Updated 6 months ago
• geoffrey-hill-tutamantic / rapid-threat-model-prototyping-docs
  This repository stores content that can be used to design a Rapid Threat Model Prototyping process for a software development group.
  ☆154Updated last year
• product-security-group / Security_Ladders
  Open source security career ladders
  ☆114Updated last year
• trustoncloud / threatmodel-for-aws-s3
  ThreatModel for Amazon S3 - Library of all the attack scenarios on Amazon S3, and how to mitigate them following a risk-based approach
  ☆148Updated 11 months ago
• securitytemplates / sectemplates
  Open source templates you can use to bootstrap your security programs
  ☆320Updated 3 weeks ago
• adamshostack / DFD3
  ☆68Updated 2 months ago
• magoo / ato-checklist
  A checklist of practices for organizations dealing with account takeover (ATO)
  ☆261Updated 3 years ago
• owasp-cloud-security / owasp-cloud-security
  OWASP Cloud Security - Enabling conversations through threat and control stories
  ☆175Updated 5 years ago
• tenable / KaiMonkey
  KaiMonkey provides vulnerable infrastructure as code (IaC) to help explore and understand common cloud security threats exposed via IaC.
  ☆93Updated 9 months ago
• rpetrich / deciduous
  App that simplifies building decision trees to model adverse scenarios
  ☆177Updated 2 months ago
• duo-labs / appsec-education
  Presentations, training modules, and other education materials from Duo Security's Application Security team.
  ☆68Updated 3 years ago
• WithSecureLabs / leonidas
  Automated Attack Simulation in the Cloud, complete with detection use cases.
  ☆470Updated 2 weeks ago
• owaspsamm / core
  Core model including reused documentation
  ☆85Updated last week
• 0x4D31 / detection-and-response-pipeline
  ✨ A compilation of suggested tools/services for each component in a detection and response pipeline, along with real-world examples. The …
  ☆246Updated 7 months ago
• izar / awesome-threat-modelling
  A curated list of threat modeling resources (Books, courses - free and paid, videos, tools, tutorials and workshops to practice on ) for …
  ☆17Updated 6 months ago