Event: Play Elevation of Privilege Threat Modeling Game with its Inventor Adam Shostack

When: 11th August 2021
Time: 1700 hours BST / 0900 hours PT
Where: Online

Worried about security but need to find a path to doing something about it? We are here to blaze a trail through the confusion. This is an affordable accessible means for developers to use their system knowledge to find how specific threats from the past might apply to your system today. As a consultant, you'll have the rich experience necessary to pass this technique on to your customers.

This is an opportunity to experience, first hand, a game of Elevation of Privilege supported by the games inventor - threat modelling expert Adam Shostack. Working in a small group of just 7 participants, you'll use the game to find threats in a sample system architecture.

You will receive:
An Elevation of Privilege Card deck
A training exercise prepared by Adam Shostack

Your key learnings will be

• A lightweight, fun process to turn worries about security into actionable tickets or user stories 
  
• Experience of actually executing this process, with the best possible support, so that you can apply it with confidence 
  
• First hand knowledge that you can pass on to your colleagues, customers and collaborators 
  

Event Format

We will play the game using the Croupier online hand-dealing app and a set of physical-cards which will be yours to keep. The card deck and a sample training exercise will be sent by post well-ahead of the session. Access to the Croupier online tool is free and confidential.

The session will be run by Adam Shostack with Agile Stationery on hand to facilitate. It will be a small and exclusive group of just 7 active participants, working together via Zoom for 1.5 hours. 

Additional learning outcomes 

• Familiarise yourself with the rules and how they apply to real game play 
  
• Experience, and question, gaming strategies and scoring system 
  
• Discover how physical tools and remote working interact and how this emerges as the optimal strategy 
  
• Cheat, or don't cheat, and experience the impact on engagement and outcomes