Do you want to learn more about threat modelling and "secure by design"? Join us for a half-day introductory workshop, where you will threat model the e-commerce application used for this year's BSidesTO CTF competition!

• Understand the basics of threat modelling
• Decompose systems to understand their architecture
• Identify threats using commonly used threat modelling frameworks
• Conduct attack tree analysis
• Propose threat mitigations

Yuk Fai Chan is a security professional with 15+ years of experience and is a co-leader of the OWASP Toronto chapter, where he organizes community events and promotes software security. A former pentester, he specializes in AppSec and threat modelling. He holds OSCP and CISSP certifications and has spoken at conferences such as BSidesTO and SecTor.