Information

Threat Modeling @ W3C
  • Past
  • Confirmed
  • Breakout Sessions

Meeting

Event details

Date:
– Pacific Daylight Time
Status:
Confirmed
Location:
4 Concourse Level - Manhattan
Participants:
Cristiano Aguzzi, Martin Alvarez-Espinar, Matthew Atkinson, Greg Bernstein, Bert Bos, Aykut Bulut, Adam Burns, Alan Buxey, Pierre-Antoine Champin, Denken Chen, Guohui Deng, Matt Garrish, Maxime Guerreiro, Xiaocheng Hu, Erica Kovac, Sulekha Kulkarni, Sandor Major, Arnaud Mandy, Simone Onofri, Thomas Prieur, Florian Scholz, Wendy Seltzer, Tzviya Siegman, Joshua Ssengonzi, Zacharias Törnblom, Daniel Veditz
Big meeting:
TPAC 2024 (Calendar)

When a standard is written, it's required to write Security and Privacy Considerations and, if the technology is particularly disruptive, to sample the human rights impact.
One of the processes that can be used to get these considerations in a practical and structured way is to use Threat Modeling, a repeatable process with several techniques to understand best what we're doing, what can't go wrong, and what we can do about it.
In this session, we will explore how to initiate Threat Modeling from the early stages of a specification, using practical examples. This approach ensures that everything is secure, respects privacy, and is properly documented.

Agenda

 View agenda

Chairs:
Simone Onofri

Description:
When a standard is written, it's required to write Security and Privacy Considerations and, if the technology is particularly disruptive, to sample the human rights impact.
One of the processes that can be used to get these considerations in a practical and structured way is to use Threat Modeling, a repeatable process with several techniques to understand best what we're doing, what can't go wrong, and what we can do about it.
In this session, we will explore how to initiate Threat Modeling from the early stages of a specification, using practical examples. This approach ensures that everything is secure, respects privacy, and is properly documented.

Goal(s):
Secure the standards

Materials:

Minutes

 Read minutes

Export options

Personal Links

Please log in to export this event with all the information you have access to.

Public Links

The following links do not contain any sensitive information and can be shared publicly.

Feedback

Report feedback and issues on GitHub.