# The Object-Oriented Approach to Threat Modeling - Global Meetup Recap **URL:** \ **Category:** Events & Highlights\ **Created:** [October 24, 2024, 10:12pm UTC](https://threatmodelingconnect.discourse.group/t/the-object-oriented-approach-to-threat-modeling-global-meetup-recap/382 "2024-10-24T22:12:15Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![shuning](https://sea2.discourse-cdn.com/flex002/user_avatar/threatmodelingconnect.discourse.group/shuning/32/6_2.png) [@shuning](https://threatmodelingconnect.discourse.group/u/shuning)\ **Post date:** [October 24, 2024, 10:12pm UTC](https://threatmodelingconnect.discourse.group/t/the-object-oriented-approach-to-threat-modeling-global-meetup-recap/382/1 "2024-10-24T22:12:15Z")
On 2024-10-24T04:00:00Z, we hosted the October Global Community Meetup with Matthew McDonald, where walked us through: - The Object-Oriented Programming (OOP) principles - How each OPP principle (Abstraction, Encapsulation, Inheritance, Polymorphism) can be applied to threat modeling ## Replay [![](https://us1.discourse-cdn.com/flex002/uploads/threatmodelingconnect1/original/1X/508919f052c7c61f78f6911c9f8d8cea0e6eeba9.jpeg "Enhancing Threat Modeling with object-oriented programming (OOP) principles") ](https://www.youtube.com/watch?v=0UOXdvCHz3E&t=181) ## Key concepts Matthew did a fantastic job breaking down how each OOP principle can enhance your threat modeling approach. Here’s a quick peek: ![OOP Principles Overview](https://us1.discourse-cdn.com/flex002/uploads/threatmodelingconnect1/original/1X/5eabfd74c369d3b5730ddb44c2ec35fb96aebfc6.png) !["Abstraction" and threat modeling at 2.47.17 PM](https://us1.discourse-cdn.com/flex002/uploads/threatmodelingconnect1/original/1X/92a6f906e22afc593bf89f79049f86a9be9ad768.png) !["Encapsulation" and threat modeling](https://us1.discourse-cdn.com/flex002/uploads/threatmodelingconnect1/original/1X/b0664206a4297047fd8207854eba7cd01059687c.png) !["Inheritance" and threat modeling](https://us1.discourse-cdn.com/flex002/uploads/threatmodelingconnect1/original/1X/b38f438c7f45c3100c5457d7d214d7d422dcb90e.png) !["Polymorphism" and threat modeling](https://us1.discourse-cdn.com/flex002/uploads/threatmodelingconnect1/original/1X/0b8dde733c4f1e26065e580a2eecea9dd04b07ee.png) 👉 See the examples of each principle Matthew’s [full slides](https://4550632.fs1.hubspotusercontent-na1.net/hubfs/4550632/Threat%20Modeling%20Connect/Meetups/An%20Object-Oriented%20Approach%20to%20Threat%20Modeling%20by%20Matthew%20McDonald.pdf) ## Working session After Matthew’s talk, we split into small groups to brainstorm how each OOP principle could be applied to real-world threat modeling. So much great collaboration! 👉 Take a look at the insights captured on our [Virtual Whiteboard](https://4550632.fs1.hubspotusercontent-na1.net/hubfs/4550632/Threat%20Modeling%20Connect/Meetups/TMCOctober%20Global%20Meetup%20-%20An%20Objected-Oriented%20Approach%20to%20Threat%20Modeling_Whiteboard.pdf). ## Group photo 😍 Thanks to everyone who joined us for such a collaborative session! Special shoutout to our amazing speaker @MatthewMcDonald for sharing this framework, and to our awesome facilitators @Alicia, @ClaireAA @Qasim @Simon_monteyne @Tobias for running the group discussions and making the event a blast for all of us! ![October Global Meetup Group Photo](https://us1.discourse-cdn.com/flex002/uploads/threatmodelingconnect1/original/1X/60a2a07ac8b963b57aa7329296a76796f5eb27a5.jpeg) ## Next meetup (Nov 14, 2024) We’re going to talk about AI Threat Modeling at our Global meetup next month! Leading us is Susanna Cox ([https://www.linkedin.com/in/disesdi/](https://www.linkedin.com/in/disesdi/)), a core member of the OWASP AI Exchange team and a patent holder for AIML system security. She will expand her popular talk on “AI Threat Modeling” at the OWASP conference and delve deep into the strategies for using threat modeling to manage AI risks. Join us! > **[November Global Meetup: Threat Modeling in the Age of AI · Zoom · Luma](https://luma.com/69ebo06z)** > > With AI quickly becoming a new attack vector, how can you stay ahead of the threats? Join us for the November TMC Global Community Meetup as we explore ways to… ---
**Author:** ![dimitri.redant](https://sea2.discourse-cdn.com/flex002/user_avatar/threatmodelingconnect.discourse.group/dimitri.redant/32/107_2.png) [@dimitri.redant](https://threatmodelingconnect.discourse.group/u/dimitri.redant)\ **Post date:** [October 25, 2024, 6:41am UTC](https://threatmodelingconnect.discourse.group/t/the-object-oriented-approach-to-threat-modeling-global-meetup-recap/382/2 "2024-10-25T06:41:56Z")
Thanks for having organized this meetup which was very inspiring. I see you on the next meetup 🙂 ---
**Author:** ![Simon\_monteyne](https://sea2.discourse-cdn.com/flex002/user_avatar/threatmodelingconnect.discourse.group/simon_monteyne/32/129_2.png) [@Simon\_monteyne](https://threatmodelingconnect.discourse.group/u/Simon_monteyne)\ **Post date:** [October 26, 2024, 9:54am UTC](https://threatmodelingconnect.discourse.group/t/the-object-oriented-approach-to-threat-modeling-global-meetup-recap/382/3 "2024-10-26T09:54:51Z")
Thank you for the meetup, and thanks to all the participants in the breakout rooms for their participation! 😉 When it comes to the Abstraction principle, the main takeaways from our group were that it allows for clearer DFDs, thus enhancing communications but also being less overwhelming for people less experienced in threat modeling. On top of that, abstracting key features/components permits to assign the identification of threats and mitigations to different teams, with each team focusing on the components in which they have the most expertise 🧠 ---
**Author:** ![Qasim](https://sea2.discourse-cdn.com/flex002/user_avatar/threatmodelingconnect.discourse.group/qasim/32/59_2.png) [@Qasim](https://threatmodelingconnect.discourse.group/u/Qasim)\ **Post date:** [October 26, 2024, 4:58pm UTC](https://threatmodelingconnect.discourse.group/t/the-object-oriented-approach-to-threat-modeling-global-meetup-recap/382/4 "2024-10-26T16:58:19Z")
Great presentation! I was able to visualize principle of Inheritance as a process which promotes efficiency by allowing established threat models e.g. Identity and Access Management threat model created by a central IAM team to pass it down to the application teams building or buying applications across the organization as a result reducing the duplication of effort.