Elevation of Privilege: the Threat Modeling Game
In my work blog [link to http://blogs.msdn.com/sdl/ no longer works]: “Announcing Elevation of Privilege: The Threat Modeling Game.” [link to http://blogs.msdn.com/sdl/archive/2010/03/02/announcing-elevation-of-privilege-the-threat-modeling-game.aspx no longer works]
After RSA, I’ll have more to say about how it came about, how it helps you and how it helps more chaos emerge. But if you’re here, you should come get a deck at the Microsoft booth (1500 row).
Wish the video advertised on the EoP site worked.
It requires an install of yet another agent of exploit, however. One agent that we have to rip out of default installs (Flash, feh) is bad enough. We’re not about to be putting Silverlight on; it’ll just be yet another mess we have to constantly update.
Suggest you have the video provided as a downloadable file instead.