After a six hour delay due to technical problems *before* my journey
even started I’m finally on the plane and waiting for take off. Tag
an additional five hour delay due to a missed connection in New York
and this quickly become a very, very long trip. Perhaps my longest
ever. Ah well, the price we pay for living at the end of the world, I
guess.

I’m on my way to Scottsdale Arizona for CSI NetSec 2007. I’m
presenting in the ‘management’ track (yes, you heard me) on our new
Corporate Threat Modeling methodology. The idea we came up with is
very simple actually. Take the basic principles and concepts used in
application Threat Modeling, simplify a whole lot, stretch a little,
sprinkle with some basic algebra, wrap it a GUI and you have a
powerful tool for analyzing the threats your organization faces.

James has cobbled together a little C# app that implements the
methodology and we plan to release the first version at the
conference also (although we were still debugging over the phone when
they finally started calling for me by name in the boarding lounge).
But we have already used the concept in a huge corporate environment
and I think it worked pretty nicely.

I’ll post the slides and the tool here when I’m back next week.

If you happen to be at CSI, look me up and buy me some Red Bull.