Master the systematic approach to identifying, assessing, and mitigating security risks in software and cloud architectures.
This course provides a comprehensive examination of threat modeling as a structured methodology for identifying and mitigating security vulnerabilities within software systems and cloud environments. It covers the core concepts of assets, threats, vulnerabilities, and risk management, while exploring various modeling techniques including STRIDE, DREAD, MITRE ATT&CK, and attack trees. The content details the integration of threat modeling into the software development life cycle, emphasizing continuous threat modeling, automated tooling, and the use of frameworks like Threagile and Deciduous. Participants will gain insights into defining security controls, evaluating risk impact, and adapting defensive strategies to evolving real-world threat landscapes.
Topics Covered:
23 activities • 22 videos • duration: 2h 46m
Cybersecurity Leader & Educator | Higher Education Professor and Director | Author & Speaker | Mentoring the Next Generation
Nearly 30 years in engineering and cybersecurity has taught me one thing: the best security happens when you build it into everything from the ground up. I'm a cybersecurity strategist who believes in lifting up the next generation of cyber professionals while solving today's most complex security challenges. What I do: Currently serving as Director of Temple University's Cyber Defense and Information Assurance Program, where I'm building the curriculum that prepares cybersecurity professionals for real-world threats. I also teach secure software development because developers who understand security from day one build better products. Previously worked in product security at JPMorgan Chase and built the product security program at Envestnet, where I transformed how global organizations integrate security into their product lifecycles. From vulnerability management programs to cloud transformations, I've helped companies reduce risk while accelerating innovation. What drives me: Writing books about cybersecurity (Alicia Connected series, The Application Security Program Handbook) because security awareness should start early. Contributing to the community through my SubStack, YouTube channel, and speaking at conferences because knowledge shared is knowledge multiplied. My approach: Security isn't about saying no but about finding the right way to say yes. Whether I'm working with C-suite executives or entry-level developers, I focus on practical solutions that actually work in the real world. I've worked across finance, healthcare, defense, and commercial industries. Every sector faces unique challenges, but the fundamentals remain the same: good security enables business, it doesn't hinder it.
