# General **URL:** https://threatmodelingconnect.discourse.group/c/general/31.md?page=1 [Latest](https://threatmodelingconnect.discourse.group/latest.md) · [Categories](https://threatmodelingconnect.discourse.group/categories.md) · [Tags](https://threatmodelingconnect.discourse.group/tags.md) **Page:** 2 --- ## [OWASP Cornucopia Companion Edition](https://threatmodelingconnect.discourse.group/t/owasp-cornucopia-companion-edition/1136)
**Author:** [@Johan\_Sydseter](https://threatmodelingconnect.discourse.group/u/Johan_Sydseter)\ **Replies:** 0\ **Last updated:** [August 6, 2025, 4:23pm UTC](https://threatmodelingconnect.discourse.group/t/owasp-cornucopia-companion-edition/1136 "2025-08-06T16:23:03Z")
At OWASP Cornucopia we have long stated that we will create more decks, and now we will! To provide more possibilities for doing threat modeling while playing games, OWASP Cornucopia would like to welcome all OWASP m… --- ## [The CyberSec Game Challenge](https://threatmodelingconnect.discourse.group/t/the-cybersec-game-challenge/1103)
**Author:** [@DevikaGibbs](https://threatmodelingconnect.discourse.group/u/DevikaGibbs)\ **Replies:** 0\ **Last updated:** [July 28, 2025, 6:08pm UTC](https://threatmodelingconnect.discourse.group/t/the-cybersec-game-challenge/1103 "2025-07-28T18:08:12Z")
Hello everyone, Here’s something a bit different, and hopefully fun! CyberSec Games are running a summer competition inviting anyone with an idea for a physical cybersecurity game - board game, card game, whatever you … --- ## [Does AI do a better job?](https://threatmodelingconnect.discourse.group/t/does-ai-do-a-better-job/1046)
**Author:** [@PaulSpruce](https://threatmodelingconnect.discourse.group/u/PaulSpruce)\ **Replies:** 5\ **Last updated:** [July 2, 2025, 4:52pm UTC](https://threatmodelingconnect.discourse.group/t/does-ai-do-a-better-job/1046 "2025-07-02T16:52:25Z")
Some pondering questions for all to spark some discussion :smiling\_face\_with\_sunglasses: Do we solely rely on AI tooling for modelling now? There are now a lot AI agents that help this undertaking. I understand why we … --- ## [Free training for displaced Federal workers](https://threatmodelingconnect.discourse.group/t/free-training-for-displaced-federal-workers/1054)
**Author:** [@adamshostack](https://threatmodelingconnect.discourse.group/u/adamshostack)\ **Replies:** 0\ **Last updated:** [July 1, 2025, 3:56pm UTC](https://threatmodelingconnect.discourse.group/t/free-training-for-displaced-federal-workers/1054 "2025-07-01T15:56:10Z")
(I hope this is ok for any community ‘commercial purpose’ rules because it’s a free offer, and I realized I forgot to share it here.) US Government employees (and former employees) are going through a lot of chaos. Many… --- ## [Threat Mod Con 2025 DC - Call for Papers?](https://threatmodelingconnect.discourse.group/t/threat-mod-con-2025-dc-call-for-papers/1049)
**Author:** [@WillGetz](https://threatmodelingconnect.discourse.group/u/WillGetz)\ **Replies:** 3\ **Last updated:** [June 30, 2025, 8:40pm UTC](https://threatmodelingconnect.discourse.group/t/threat-mod-con-2025-dc-call-for-papers/1049 "2025-06-30T20:40:47Z")
Hello Friends, I thought I saw a link to submit a talk to the ThreatModCon in DC this year, but I can’t find it now. Have the submissions been closed? Thank you very much, Will --- ## [No need to fear the clouds. Play OWASP Cumulus!](https://threatmodelingconnect.discourse.group/t/no-need-to-fear-the-clouds-play-owasp-cumulus/1047)
**Author:** [@Johan\_Sydseter](https://threatmodelingconnect.discourse.group/u/Johan_Sydseter)\ **Replies:** 0\ **Last updated:** [June 26, 2025, 8:56pm UTC](https://threatmodelingconnect.discourse.group/t/no-need-to-fear-the-clouds-play-owasp-cumulus/1047 "2025-06-26T20:56:45Z")
The clouds can be a scary place. All these machines that simply aren’t yours. So, how can you make sure you continuously keep your cloud infrastructure secure? OWASP Cumulus is the easy way to bring security into the clo… --- ## [Gamification for threat modeling of machine learning](https://threatmodelingconnect.discourse.group/t/gamification-for-threat-modeling-of-machine-learning/1017)
**Author:** [@Johan\_Sydseter](https://threatmodelingconnect.discourse.group/u/Johan_Sydseter)\ **Replies:** 1\ **Last updated:** [June 13, 2025, 7:30pm UTC](https://threatmodelingconnect.discourse.group/t/gamification-for-threat-modeling-of-machine-learning/1017 "2025-06-13T19:30:15Z")
Are you letting the AI do the threat modeling for you? There is no need to let the machines take over the world! Threat model using “Elevation of MLSec” on copi.owasp.org instead. Our survival depends on it! At copi… --- ## [What should we model next year?](https://threatmodelingconnect.discourse.group/t/what-should-we-model-next-year/989)
**Author:** [@shuning](https://threatmodelingconnect.discourse.group/u/shuning)\ **Replies:** 4\ **Last updated:** [June 1, 2025, 12:01pm UTC](https://threatmodelingconnect.discourse.group/t/what-should-we-model-next-year/989 "2025-06-01T12:01:38Z")
We just wrapped up the TMC Threat Modeling Hackathon 2025 a month ago! (Missed it? Ouch… you missed a good one! Catch the recap here:TMC Threat Modeling Hackathon 2025 Recap) Believe it or not, our judging panel has al… --- ## [AI Agent threat modeling - MAESTRO](https://threatmodelingconnect.discourse.group/t/ai-agent-threat-modeling-maestro/981)
**Author:** [@Mike.Novack](https://threatmodelingconnect.discourse.group/u/Mike.Novack)\ **Replies:** 0\ **Last updated:** [May 23, 2025, 12:22am UTC](https://threatmodelingconnect.discourse.group/t/ai-agent-threat-modeling-maestro/981 "2025-05-23T00:22:31Z")
Hi, does anyone have thoughts about new threat modeling framework specifically for AI agents called MAESTRO? It is also endorsed by OWASP. It is referenced in some of there most recent publications. Full transparency … --- ## [Announcing CyberSec Games!](https://threatmodelingconnect.discourse.group/t/announcing-cybersec-games/939)
**Author:** [@sjgibbs](https://threatmodelingconnect.discourse.group/u/sjgibbs)\ **Replies:** 4\ **Last updated:** [May 23, 2025, 12:19am UTC](https://threatmodelingconnect.discourse.group/t/announcing-cybersec-games/939 "2025-05-23T00:19:04Z")
We have noticed growing interest in gamifying threat modeling from this community, since we picked up manufacturing of Elevation of Privilege in 2018 as Agile Stationery. We now have a new platform that we would love yo… --- ## [Do you need a new set of eyes or perspective?](https://threatmodelingconnect.discourse.group/t/do-you-need-a-new-set-of-eyes-or-perspective/937)
**Author:** [@PaulSpruce](https://threatmodelingconnect.discourse.group/u/PaulSpruce)\ **Replies:** 3\ **Last updated:** [May 10, 2025, 2:34pm UTC](https://threatmodelingconnect.discourse.group/t/do-you-need-a-new-set-of-eyes-or-perspective/937 "2025-05-10T14:34:30Z")
Hi All, I’d really like to contribute more to the community so I’d like to offer my services for collaboration on anything threat modelling related. If you want a different perspective or a fresh set of eyes let me kno… --- ## [What Should an Internal Threat Library Include?](https://threatmodelingconnect.discourse.group/t/what-should-an-internal-threat-library-include/859)
**Author:** [@shuning](https://threatmodelingconnect.discourse.group/u/shuning)\ **Replies:** 8\ **Last updated:** [April 27, 2025, 8:00am UTC](https://threatmodelingconnect.discourse.group/t/what-should-an-internal-threat-library-include/859 "2025-04-27T08:00:49Z")
Challenge of the Month: A well-structured Threat Library can help teams identify, assess, and mitigate risks more effectively. But what key components should it include? What attributes or data models are essential for … --- ## [Team 7's Hackathon 2025 Journey: A Winner's Perspective](https://threatmodelingconnect.discourse.group/t/team-7s-hackathon-2025-journey-a-winners-perspective/917)
**Author:** [@DraganS](https://threatmodelingconnect.discourse.group/u/DraganS)\ **Replies:** 2\ **Last updated:** [April 27, 2025, 6:32am UTC](https://threatmodelingconnect.discourse.group/t/team-7s-hackathon-2025-journey-a-winners-perspective/917 "2025-04-27T06:32:17Z")
Hello everyone, As expected, I’m happy to share some of thoughts and remarks about our journey as Team 7 during the Threat Modeling Hackathon 2025,on top of the final report that my very proactive teammate Matt already … --- ## [Creation of a New Chapter in the UK......Interested?](https://threatmodelingconnect.discourse.group/t/creation-of-a-new-chapter-in-the-uk-interested/885)
**Author:** [@PaulSpruce](https://threatmodelingconnect.discourse.group/u/PaulSpruce)\ **Replies:** 3\ **Last updated:** [April 18, 2025, 1:45pm UTC](https://threatmodelingconnect.discourse.group/t/creation-of-a-new-chapter-in-the-uk-interested/885 "2025-04-18T13:45:42Z")
Hi All, I am looking at creating a TMC chapter in the UK to expand on the fantastic work TMC London are doing for the community. I am looking for a co lead to help set this up Locations covered? Wales :wales: and the … --- ## [From Interviews to DFDs](https://threatmodelingconnect.discourse.group/t/from-interviews-to-dfds/884)
**Author:** [@donavancheah](https://threatmodelingconnect.discourse.group/u/donavancheah)\ **Replies:** 0\ **Last updated:** [April 15, 2025, 12:10pm UTC](https://threatmodelingconnect.discourse.group/t/from-interviews-to-dfds/884 "2025-04-15T12:10:55Z")
Recently, I had some discussions with threat modellers on which parts of the job can be automated, and which we can’t seem to find great tools. When on the Threat Modeling Hackathon, some teams report difficulties in tr… --- ## [How can TM bring design and operations together?](https://threatmodelingconnect.discourse.group/t/how-can-tm-bring-design-and-operations-together/857)
**Author:** [@PaulSpruce](https://threatmodelingconnect.discourse.group/u/PaulSpruce)\ **Replies:** 8\ **Last updated:** [April 3, 2025, 2:33pm UTC](https://threatmodelingconnect.discourse.group/t/how-can-tm-bring-design-and-operations-together/857 "2025-04-03T14:33:28Z")
I’d love to hear your thoughts and experiences around using the output of your threat modelling activities to build or even strengthen the much needed collaboration between design and operational security teams. Comment… --- ## [What are the AI use cases for threat modeling?](https://threatmodelingconnect.discourse.group/t/what-are-the-ai-use-cases-for-threat-modeling/768)
**Author:** [@anonymous3](https://threatmodelingconnect.discourse.group/u/anonymous3)\ **Replies:** 2\ **Last updated:** [March 16, 2025, 4:17pm UTC](https://threatmodelingconnect.discourse.group/t/what-are-the-ai-use-cases-for-threat-modeling/768 "2025-03-16T16:17:38Z")
Hi Whare are some practical AI uses cases that you think can successfully enhance the threat modeling process ? --- ## [Describe Your Threat Modeling Process in 3 Sentences (or Less)](https://threatmodelingconnect.discourse.group/t/describe-your-threat-modeling-process-in-3-sentences-or-less/814)
**Author:** [@shuning](https://threatmodelingconnect.discourse.group/u/shuning)\ **Replies:** 17\ **Last updated:** [March 15, 2025, 12:05pm UTC](https://threatmodelingconnect.discourse.group/t/describe-your-threat-modeling-process-in-3-sentences-or-less/814 "2025-03-15T12:05:49Z")
By now, many of us are familiar with the Four-Question Framework for threat modeling. However, how it’s applied can look very different across organizations and teams–and you might even use a different framework altogeth… --- ## [What's your biggest challenge with threat modeling right now?](https://threatmodelingconnect.discourse.group/t/whats-your-biggest-challenge-with-threat-modeling-right-now/175)
**Author:** [@shuning](https://threatmodelingconnect.discourse.group/u/shuning)\ **Replies:** 11\ **Last updated:** [March 13, 2025, 4:27pm UTC](https://threatmodelingconnect.discourse.group/t/whats-your-biggest-challenge-with-threat-modeling-right-now/175 "2025-03-13T16:27:20Z")
Hi TMC Community! I want to open the floor for a discussion on the challenges we face in threat modeling and related areas. Whether you’re a seasoned practitioner or just getting started, chances are you’re not alone. Y… --- ## [Threats list for specific components](https://threatmodelingconnect.discourse.group/t/threats-list-for-specific-components/787)
**Author:** [@vyasar](https://threatmodelingconnect.discourse.group/u/vyasar)\ **Replies:** 2\ **Last updated:** [February 23, 2025, 9:52am UTC](https://threatmodelingconnect.discourse.group/t/threats-list-for-specific-components/787 "2025-02-23T09:52:31Z")
Hello All, I am new to Threat modelling, looking your support to learn and complete my new assignment. I came across some threat modelling tools like OWASP threat dragon to design some models but need some more practic… --- ## [Sample threat model for Application](https://threatmodelingconnect.discourse.group/t/sample-threat-model-for-application/791)
**Author:** [@vyasar](https://threatmodelingconnect.discourse.group/u/vyasar)\ **Replies:** 4\ **Last updated:** [February 13, 2025, 4:18am UTC](https://threatmodelingconnect.discourse.group/t/sample-threat-model-for-application/791 "2025-02-13T04:18:08Z")
Hi All, Is there any sample threat model project available for web application to practice ? --- ## [Threat Intelligence source for privacy?](https://threatmodelingconnect.discourse.group/t/threat-intelligence-source-for-privacy/789)
**Author:** [@voxan](https://threatmodelingconnect.discourse.group/u/voxan)\ **Replies:** 0\ **Last updated:** [February 12, 2025, 10:55am UTC](https://threatmodelingconnect.discourse.group/t/threat-intelligence-source-for-privacy/789 "2025-02-12T10:55:58Z")
Does anyone know any source for threat intelligence for privacy like for security e.g. IBM X-Force exchange or alienvault otx? --- ## [Share Your Metrics for Success in Threat Modeling](https://threatmodelingconnect.discourse.group/t/share-your-metrics-for-success-in-threat-modeling/750)
**Author:** [@shuning](https://threatmodelingconnect.discourse.group/u/shuning)\ **Replies:** 11\ **Last updated:** [January 24, 2025, 1:47pm UTC](https://threatmodelingconnect.discourse.group/t/share-your-metrics-for-success-in-threat-modeling/750 "2025-01-24T13:47:29Z")
Challenge of the Month: Share Your Metrics for Success in Threat Modeling About this challenge: Help define what success looks like in threat modeling. Let’s share insights on the key metrics that your teams use to meas… --- ## [Hackathon design](https://threatmodelingconnect.discourse.group/t/hackathon-design/737)
**Author:** [@adamshostack](https://threatmodelingconnect.discourse.group/u/adamshostack)\ **Replies:** 5\ **Last updated:** [January 18, 2025, 8:54pm UTC](https://threatmodelingconnect.discourse.group/t/hackathon-design/737 "2025-01-18T20:54:47Z")
I’ve written up some thoughts on the Hackathon + judging criteria, Shostack + Associates \> Shostack + Friends Blog \> A Different Hackathon Design? Would love to hear what people think about either the thing I see as goi… --- ## [Scaling Threat Modeling with AI: Generating 1000 Threat Models Using Gemini 2.0 and AI Security Analyzer](https://threatmodelingconnect.discourse.group/t/scaling-threat-modeling-with-ai-generating-1000-threat-models-using-gemini-2-0-and-ai-security-analyzer/754)
**Author:** [@Dave](https://threatmodelingconnect.discourse.group/u/Dave)\ **Replies:** 0\ **Last updated:** [January 17, 2025, 11:09am UTC](https://threatmodelingconnect.discourse.group/t/scaling-threat-modeling-with-ai-generating-1000-threat-models-using-gemini-2-0-and-ai-security-analyzer/754 "2025-01-17T11:09:14Z")
h/t to irene221b on the OWASP threat\_modeling slack channel An interesting article on feeding code to Gemini and then fine-tuning prompts to get it to output security issues in a consistent markdown format. --- ## [Nominate a question for the 'State of Threat Modeling' survey](https://threatmodelingconnect.discourse.group/t/nominate-a-question-for-the-state-of-threat-modeling-survey/486)
**Author:** [@shuning](https://threatmodelingconnect.discourse.group/u/shuning)\ **Replies:** 15\ **Last updated:** [December 12, 2024, 7:31pm UTC](https://threatmodelingconnect.discourse.group/t/nominate-a-question-for-the-state-of-threat-modeling-survey/486 "2024-12-12T19:31:02Z")
Help shape the “State of Threat Modeling” survey the TMC community is launching next year. Your questions will play a key role in gathering insights into the trends, challenges, and successes in threat modeling practices… --- ## [How to start a Security Champions Program?](https://threatmodelingconnect.discourse.group/t/how-to-start-a-security-champions-program/38)
**Author:** [@community\_migration](https://threatmodelingconnect.discourse.group/u/community_migration)\ **Replies:** 2\ **Last updated:** [December 3, 2024, 1:56pm UTC](https://threatmodelingconnect.discourse.group/t/how-to-start-a-security-champions-program/38 "2024-12-03T13:56:53Z")
Original posted by @kchau Hi folks! I hear the term security champions being thrown around quite often and how important it is for some to start building the program. I’ve seen different companies approach the topic ve… --- ## [Threat Modeling and Threat Detection](https://threatmodelingconnect.discourse.group/t/threat-modeling-and-threat-detection/631)
**Author:** [@dragon44](https://threatmodelingconnect.discourse.group/u/dragon44)\ **Replies:** 1\ **Last updated:** [November 18, 2024, 8:49pm UTC](https://threatmodelingconnect.discourse.group/t/threat-modeling-and-threat-detection/631 "2024-11-18T20:49:33Z")
Can threat modeling be used in the quest of threat detection. iI yes, what are some of the use cases that you forsee. --- ## [TM Copilot, with M365?](https://threatmodelingconnect.discourse.group/t/tm-copilot-with-m365/524)
**Author:** [@practikl](https://threatmodelingconnect.discourse.group/u/practikl)\ **Replies:** 0\ **Last updated:** [November 11, 2024, 10:33pm UTC](https://threatmodelingconnect.discourse.group/t/tm-copilot-with-m365/524 "2024-11-11T22:33:13Z")
Hello, AI/ML/Data Community. Like many organizations, our company would like to eventually deploy Copilot alongs M365. An analysis has been done months ago and recommended to follow the bests practices suggested by Micr… --- ## [Looking for threat models and/or collaborations](https://threatmodelingconnect.discourse.group/t/looking-for-threat-models-and-or-collaborations/501)
**Author:** [@avish](https://threatmodelingconnect.discourse.group/u/avish)\ **Replies:** 2\ **Last updated:** [November 10, 2024, 10:10am UTC](https://threatmodelingconnect.discourse.group/t/looking-for-threat-models-and-or-collaborations/501 "2024-11-10T10:10:22Z")
Hi, My name is Avi Shaked and I’m a researcher at University of Oxford. I believe threat modelling is significant to designing and delivering trustworthy systems. However, my observation is the threat modelling is rare… [Previous page](https://threatmodelingconnect.discourse.group/c/general/31.md) [Next page](https://threatmodelingconnect.discourse.group/c/general/31.md?page=2)