Marcin Niemiec: Threat Modeling Using LLMs

This talk, presented by Marcin Niemiec, focuses on Threat Modeling and its significance in the tech industry, especially following Executive Order 14028, which mandates this practice for US government employees. The session explores how to leverage Artificial Intelligence, particularly Large Language Models (LLMs), to enhance the Threat Modeling process. The speaker discusses the definition of Threat Modeling, the capabilities of LLMs, and practical applications including using ChatGPT and OpenAI API for effective modeling. Attendees gain insights into the importance of creating quality input documents and how to continuously perform Threat Modeling using a custom GitHub action, while also being made aware of potential limitations and pitfalls in the process.