VerSprite Media (newest on top)

BSides ATL (2011) - Making your own Web Security P.A.S.T.A (VIDEO)

This 2011 BSides presentation introduces the P.A.S.T.A Threat Modeling methodology that is a risk or asset centric way to perform threat modeling on application environments. The purpose of the web cast is to introduce what steps, resources, and testing support this new methodology aimed at delivering a collaborative approach that leverages elements of risk assessments, business impact assessments, pen tests, vulnerability scans, social engineering, incident management and more.

BSidesATL 2011-Tony UcedaVelez-Making your own Web Security P.A.S.T.A from Security BSides on Vimeo.



Credit Union News (2011) - Use of Hybrid Assessments for Cost Effective Security Analysis (WEBCAST)

This webcast overviews our Hybrid Risk Assessment Methodology (HRAM). We discuss how HRAM is more effective and efficient than other current assessments, the cost-savings, HRAM's benefits in today's changing threat landscape, and how HRAM produces a more unified picture of your organization's risks, making them easier to address and over come.

Listen to Webcast



BSides ATL (2010) - Applying Threat Modeling Beyond the Hype (VIDEO)

This video provide a good introduction to the topic of threat modeling and speaks about the pros of using this technique in order to elevate the analysis capability of various types of security assessments.

BSidesATL 2010-Tony UcedaVelez-Applying Application Threat Modeling Beyond the Conceptual Hype from Security BSides on Vimeo.



OWASP PodCast Series (2010) - Threat Modeling (PODCAST)

Jim Manico from the OWASP Foundation interviews Tony UcedaVelez on the aspects of threat modeling as well as other rapid fire topics around application security.

Listen to Podcast.