Frank Swiderski is a security software engineer at Microsoft and wrote a threat modeling tool. So, we got a demo of the tool and discussed it, and threat modeling in general, with him.
Threat modeling is a process to understand the threats against an application. It's a useful tool to make your application more secure -- as you develop it.
|