# The First TMC Tokyo Meetup 🇯🇵 **URL:** \ **Category:** Announcements\ **Tags:** tmc-tokyo\ **Created:** [January 2, 2025, 7:10pm UTC](https://threatmodelingconnect.discourse.group/t/the-first-tmc-tokyo-meetup/745 "2025-01-02T19:10:47Z")\ **Posts on this page:** 1\ **Showing post:** 1
**Author:** ![shuning](https://sea2.discourse-cdn.com/flex002/user_avatar/threatmodelingconnect.discourse.group/shuning/32/6_2.png) [@shuning](https://threatmodelingconnect.discourse.group/u/shuning)\ **Post date:** [January 2, 2025, 7:10pm UTC](https://threatmodelingconnect.discourse.group/t/the-first-tmc-tokyo-meetup/745/1 "2025-01-02T19:10:47Z")
Last month marked the launch of the first TMC local chapter in Asia: TMC Tokyo! Nearly 80 security professionals from across Japan gathered in Tokyo for an entire day—from 9 AM to 9 PM—to dive into hands-on threat modeling workshops and compete in a hardcore five-hour MINI ‘hardening’ competition called ZANSIN. I had the pleasure of attending this exciting event and wanted to share a recap of the day. ![TMC Tokyo Launch Day](https://us1.discourse-cdn.com/flex002/uploads/threatmodelingconnect1/original/1X/3ecdd98a5554a8d251e33f5ca4ee90a80bc891e9.jpeg) * * * ## About the event and organizers The meetup was hosted on December 7th, 2024 in Asakusabashi, Tokyo. It was a full day event from 9AM till 9PM, featuring two back-to-back workshops, plus a five-hour competition. Organized by @TakaharuOgasa and @Haya, this meetup officially launched the TMC Tokyo chapter, joining the ranks of TMC London and TMC Barcelona as one of the first TMC local chapters. Both organizers have been hosting and involved in threat modeling events across Japan since 2023, such as the popular "Threat Modeling Nights.” They decided to co-found TMC Tokyo to further evangelize threat modeling practices in Japan and connect Japanese security professionals with the global TMC community. ![From left to right: @TakaharuOgasa, me, @Haya](https://us1.discourse-cdn.com/flex002/uploads/threatmodelingconnect1/original/1X/616a6fdcd757dee56ca81ceb76f49dd2c93f4f61.jpeg) * * * ## Highlights #### 1. Threat Modeling Workshop by @TakaharuOgasa After taking @adamshostack’s Threat Modeling training in Dublin in 2023, @TakaharuOgasa has led over 10 threat modeling workshops in cities across Japan. This workshop combined foundational topics, such as Adam’s “Four Questions,” with advanced techniques like Incremental Threat Modeling by @irene221b. ![](https://us1.discourse-cdn.com/flex002/uploads/threatmodelingconnect1/original/1X/737b5b093614f9b8ce2b72d66376d13cc27f7c9b.jpeg) ![](https://us1.discourse-cdn.com/flex002/uploads/threatmodelingconnect1/original/1X/c59a1378d393526e615fa3797b125e5a04986a8d.jpeg) What made this workshop particularly special was the hands-on exercise, where participants modeled a game server—the very same system they would later “defend” during the “ZANSIN” workshop in the afternoon. ![](https://us1.discourse-cdn.com/flex002/uploads/threatmodelingconnect1/original/1X/67d9f03fc9df2db6b4f8fbf62ceaef064bb61e4f.jpeg) #### 2. “ZANSIN” Workshop by ZANSIN Project [ZANSIN](https://github.com/ZANSIN-sec/ZANSIN?tab=readme-ov-file) is a competition-style cybersecurity workshop where participants defend and improve a vulnerable system, simulating real-world incident response. Unlike traditional CTFs that focus on exploiting vulnerabilities, ZANSIN challenges teams to act as security engineers to protect a vulnerable system from Red Team attacks. For this event, the teams act as security engineers for an online gaming company, protecting vulnerable servers of the company while minimizing downtime and revenue loss. ![The ZANSIN organizing team introduced the workshop](https://us1.discourse-cdn.com/flex002/uploads/threatmodelingconnect1/original/1X/352538e6ffaa81899d97702a2700c1cdbd795f70.jpeg) Having modeled the same system during the morning workshop, participants entered this session with deeper insights into the vulnerabilities and plenty of ideas for defending and improving the system. The two workshops complemented each other seamlessly, enabling participants to apply their newly acquired threat modeling skills and witness the direct impact of their threat modeling efforts during the simulated attack. ![The competition in full swing](https://us1.discourse-cdn.com/flex002/uploads/threatmodelingconnect1/original/1X/98b3ce1a9f7989437265dfe456d2321ae022d2cb.jpeg) From 2 PM to 7 PM, 19 teams battled it out. The top-earning team emerged victorious, but everyone walked away a winner, gaining valuable feedback and insights. The ZANSIN team concluded the session with a comprehensive feedback discussion, making it a rewarding experience for all. ![Photo credit @Masahiro Tabata](https://us1.discourse-cdn.com/flex002/uploads/threatmodelingconnect1/original/1X/6c093301a43ba21cf569f41b37dc366b3b7f8500.jpeg) #### 3. Japanese Curry and Kabocha Cakes Sponsored by **Security Initiative** , **Secure Sky Technology** , and **IriusRisk,** the event also stood out for its delicious food. A much-needed lunch break featured hearty Japanese curry, while the coffee break during the five-hour ZANSIN session offered delightful cakes, including a standout kabocha cake. These treats kept everyone energized and ready to tackle the day. ![Photo credit @Masahiro Tabata](https://us1.discourse-cdn.com/flex002/uploads/threatmodelingconnect1/original/1X/901cc40bd4f26a5b4723d7e3f654df848519f0f7.jpeg) ![Photo credit @kobayayo](https://us1.discourse-cdn.com/flex002/uploads/threatmodelingconnect1/original/1X/e9f1d1219d86883b392f4d475c2448bc4820d924.jpeg) ![Photo credit @kobayayo](https://us1.discourse-cdn.com/flex002/uploads/threatmodelingconnect1/original/1X/5228324130977826477bd7fd6de0ba98a163d602.jpeg) #### 4. Happy Hour - ‘Kanpai’ (Cheers!) to a Day of Learning ![](https://us1.discourse-cdn.com/flex002/uploads/threatmodelingconnect1/original/1X/7115e053f737fe27d0659cdb611bbebd5423496c.jpeg) Sponsored by **Cyber Security Cloud,** the event concluded with a celebratory happy hour. After 12 hours of back-to-back workshops, participants deserved a moment to unwind. The teams toasted their hard work and collaboration. By the time @TakaharuOgasa announced the end of the event, attendees were already asking about the next meetup. This feels like the start of a cybersecurity movement in Japan, and I can’t wait to see what comes next! ![](https://us1.discourse-cdn.com/flex002/uploads/threatmodelingconnect1/original/1X/d190b9d8fa189a794a1769755231e85b2c634af3.jpeg) * * * ### Special thanks A huge shoutout to the ZANSIN team for bringing their signature event to this meetup. This competition-style workshop with real-world examples really fired up the room, challenging the participants to apply their newly-gained security skills in the most practical way by solving problems simulating real-world scenarios. They’ve hosted dozens of these workshops in Japan, Singapore, and Taiwan. Want to see one in action in your city? Let the team know in the comments! ![TMC Tokyo and ZANSIN teams](https://us1.discourse-cdn.com/flex002/uploads/threatmodelingconnect1/original/1X/9a0cf627cbe43c02a14fc1fc1c18a88686bfe485.jpeg) * * * ### More recap posts in Japanese Several participants shared their experiences and takeaways on their blogs. Dive deeper into the event through their posts: > **[結局、脅威モデリングとは何なのか（TMC Tokyo × ZANSIN感想） - 2LoD.sec](https://nikinusu.hatenablog.com/entry/2024/12/08/165032)** > > この記事は、元々興味をもって調べていた「脅威モデリング」について、皆さんの講演を聞いたりTMC Tokyo × ZANSIN（以下、長いのでtmctokyoと記載）を体験した中で「つまりこういうものか」という一定の腹落ちを得たのでメモ書きするもの。 普段ブログで書いているHow to系の話と違い、個人の感想レベルだし、今そう思っているだけでまた考えが変わるかもしれない。 けど、tmctokyoという素晴らしいイベントを通じて、自分が感じ考えたことを今の断面として書いておきたい。... > **[脅威モデリングコネクト東京 (略称:TMC Tokyo)のローンチイベントに参加しました](https://zenn.dev/cybersec_plus/articles/d6998c12fd55d7)** > **[脅威モデリング x MINI Hardening に参加して得たもの](https://zenn.dev/cybersec_plus/articles/38548ceb9f8bad)** > **[脅威モデリング x MINI Hardening 参加体験記 - Qiita](https://qiita.com/yu1c1yu1c1/items/1c4f28213e2a9e8e3133)** > > はじめに こんにちは、ゆきゆきです。(Twitter: @yu1c1yu1c1) 12/7(土)に開催された脅威モデリング x MINI Hardening（正式名称:TMC Tokyo x ZANSIN）に参加してきました。 非常に学びのある良いイベントであると感じ... > **[TMC Tokyo Meetup x ZANSINで脅威モデリングとHardeningを体験した - shinobe179-public](https://scrapbox.io/shinobe179-public/TMC_Tokyo_Meetup_x_ZANSIN%E3%81%A7%E8%84%85%E5%A8%81%E3%83%A2%E3%83%87%E3%83%AA%E3%83%B3%E3%82%B0%E3%81%A8Hardening%E3%82%92%E4%BD%93%E9%A8%93%E3%81%97%E3%81%9F)** > > https://lu.ma/tmc-tokyo-zansin-2024-12 TMC Tokyo Meetup x ZANSINという、午前中に脅威モデリングをして、その内容を元に午後からHardeningをするという、カレーとラーメンが一緒に出てきたみたいな夢のようなイベントに参加した。これはそのメモ ※カレーは本当に出てきた（後述） 運営やスポンサーの皆様、ありがとうございました。 朝 sh > **["脅威モデリング"のイベント参加レポート＆JDDでの取り組み｜Japan Digital Design, Inc.](https://note.com/japan_d2/n/nc9f83cee5503)** > > 本記事は、Japan Digital Design Advent Calendar 2024 の18日目の記事になります。 > > > > > > > > adventar.org > > > > はじめまして。三菱UFJフィナンシャル・グループ（以下MUFG）の戦略子会社であるJapan Digital Design（以下JDD）で、Security Engineerとしてプロダクトセキュリティを担うR.Inoueです。 2024/12/6(金)開催の「脅威モデリングナイト #5 in... --- _[View the full topic](https://threatmodelingconnect.discourse.group/t/the-first-tmc-tokyo-meetup/745)._