MP4 | Video: AVC, 1280x720 30 fps | Audio: AAC, 48 KHz, 2 Ch | Duration: 29m 23s
Skill Level: Intermediate | Genre: eLearning | Language: English + Subtitles | Size: 119 MB
STRIDE is a popular threat modeling framework that helps security pros and software developers think stratally about risk.
This course addresses the I in STRIDE, which stands for information disclosure. You can learn how to preserve the confidentiality of the data, secrets, and other information you store, and the policies you need to put into place to share that information safely. Topics include classic models such as data at rest and data in motion as well as information disclosure in processes and information disclosure in certain technologies such as cloud, Internet of Things and mobile, and AI and machine learning. Expert Adam Shostack also reviews the side effects of computation, the physical effects of CPUs, and the defenses you can put into place at your organization to manage metadata, secrets, and other sensitive information.
Metadata in motion
Side effects of disclosure
Disclosure in the cloud
Cryptography and other defenses