Darren Richardson

Conf42: DevSecOps 2022

Threat Modelling in CI/CD environments

A brief introduction to applying the Microsoft STRIDE Threat Model to CI/CD environments as a way of mapping your DevOps toolchain attack surface. Unfortunately, as STRIDE is from 1999, may contain references to Friends, Frasier and the Spice Girls.