Ahh, just joined the group and missed today's call!
Hey Vic,
Looking forward to engaging, helping out and learning through the process as well. Please let me know if there's any areas I can contribute with this doc!
------------------------------
Kashif Memon
Security Engineer
Amazon
------------------------------
Original Message:
Sent: Jun 19, 2025 10:17:23 AM
From: Vic Hargrave
Subject: Top Threats Meeting Minutes 2025-06-19
Discussion Topics Summary 2025-06-07
- Alex K gave discussed CSA announcements:
- Alex K indicated that the official Cloud Threat Modeling working document.
- Please make additions, other edits, and comments to that document instead of the one Alex G originally provided.
- Vic will transition the additions made in the original working document to the new official document.
- Alex G wrote a new Purpose section
- Vic added some sections on Threat Modelling Frameworks, Open-source tools, and Enterprise tools.
- Michael R will working on a table for the Threat Modelling Frameworks section.
- The team discussed the section on Modern Threat Modeling Tools and to what extent we should mention vendors - either open-source or enterprise.
- The CSA published Startup Showcase Registry: Innovating Cloud and AI Security that gives an example of how we can mentione vendors.
- The team agreed that we should discuss the classifications of modern tools: manual, automatic, and AI based.
- Vic is scheduling a meeting with ThreatModeler, Inc. to get a demonstration of their cloud threat modeling system.
- We will continue to research topics and edit/add content in the next two weeks.
- Next meeting July 3
Top Threats Working Group Call
------------------------------
Vic Hargrave
Cybersecurity Analytics Engr.
Everfox
+1-650-430-3356
[email protected]
------------------------------