OWASP BASC 2025

Threat modeling is essential for identifying and mitigating cybersecurity risks, but manual processes can be slow and error-prone. This talk explores how AI can accelerate and enhance threat modeling. We will begin by discussing the challenge of threat modeling tools becoming obsolete due to the rapid pace of development in the tech space. We will then introduce a C# tool that automates attack tree creation, highlighting its features. Real-world examples will demonstrate how AI streamlines threat modeling, increasing efficiency and ensuring consistency. We will also discuss the challenges of automating threat modeling, including analyzing system architectures and identifying attack vectors. Additionally, we will address AI's limitations in threat modeling and mitigation strategies. Whether you're new to threat modeling or want to improve existing practices, this talk will show you how AI can revolutionize your cybersecurity approach.