Security Foundations: Threat Modeling and Crypto Basics
Security Foundations & Cryptography: leave with a STRIDE threat model, mitigations list and correct password hashing and signing examples.
Not scheduled yet — no date, time or fee fixed. The most-voted topic is hosted next.
1:1 or squad batch · join the community or channel
Learn this topic with a mentor
Don't want to wait for the webinar? Pick how you'd like help. Nothing is paid now — you see the fee before anything is booked.
- Bring your own work — code, campaign, report or plan
- Mentor matched to this topic
- Time, format and fee confirmed by email first
What this session would cover
Proposed outline — the mentor finalises the agenda once this topic is scheduled.
- 1Why security foundations & cryptography matters — the common problem: Security is bolted on at the end, and crypto is used incorrectly (or home-made).
- 2Core concepts in plain language: Confidentiality, integrity, availability, threat modeling, attack surfaces, defense in depth
- 3Going further: least privilege, encryption, hashing, digital signatures, certificates, key management
- 4Framework walkthrough: STRIDE Threat Modeling, OWASP Top 10, NIST Cybersecurity Framework, Zero Trust
- 5Practical workflow, built live: A STRIDE threat model, mitigations list and correct password hashing and signing examples.
- 6How to measure it: Open critical vulnerabilities, Time to patch, Mean time to detect, Control coverage
- 7An illustrative case (a fictional example, not a client result), then live Q&A on your own situation
Who it's for
- • Students and freshers entering tech
- • Working developers and engineers
- • Tech leads and architects
You'd leave with
- A STRIDE threat model, mitigations list and correct password hashing and signing examples.
- A working understanding of STRIDE Threat Modeling and OWASP Top 10
- A short list of measures to track: Open critical vulnerabilities, Time to patch, Mean time to detect
More topics in IT: Security & Reliability
Networking for Developers: DNS, TCP and TLS Demystified
Networking & Internet Infrastructure: leave with a subnet plan, DNS/TLS inspection and a layer-by-layer troubleshooting runbook.
0 votes · View topic →
IT Support and SysAdmin Essentials for Small Teams
Systems Administration & IT Support: leave with a device-provisioning checklist, patch schedule, permission model and asset inventory.
0 votes · View topic →
Observability and SRE: Know Before Users Complain
Observability & Site Reliability Engineering: leave with structured logs, metrics and traces with correlation IDs, SLOs, alerts and a postmortem template.
0 votes · View topic →
Disaster Recovery: Backups Are Useless Until You Restore
Backup, Disaster Recovery & Business Continuity: leave with RPO/RTO targets, a backup plan, a timed restore drill and a recovery runbook.
0 votes · View topic →
Cloud Costs Under Control: ITSM and FinOps Basics
IT Service Management & FinOps: leave with a tagging policy, cost-allocation report, rightsizing actions and a unit-cost metric.
0 votes · View topic →
Cloud and Endpoint Security: Close the Common Gaps
Network, Endpoint & Cloud Security: leave with a least-privilege IAM review, secrets moved to a manager and a container scan report.
0 votes · View topic →