OWASP Global AppSec Lisbon 2024

Aimed at developers, security architects, and system engineers, this talk provides actionable insights for integrating threat modeling into development processes, enhancing security, and ensuring compliance. It focuses on the application of the newly developed Threat Modeling Capabilities (TMC) framework - contributed to by the speaker - and the OWASP Software Assurance Maturity Model (SAMM), with the speaker as a project leader, for embedding security and privacy into software. Attendees will learn to customize threat modeling practices to meet their organizational security objectives and risk tolerance, facilitating the early adoption of security and privacy measures in a scalable manner. Furthermore, the session will include an explanation and contribution of the TMC framework's mapping with SAMM to the OWASP community.