Summary
In this chapter, you’ve learned the following:
- What you’ll need to perform the threat modeling session.
- Where you can get the cards to play the game.
- The different decks of cards you have available.
- Where you can find a number of additional resources to support you in threat modeling, including a Miro template for remote threat modeling, a web app for dealing the cards remotely, and an online version of the game that you can run on your local network.
- Who should participate in the threat modeling and why.
- How you play the game and what the aim of playing EoP is.
- Some variations of play that may work better for you as a team.
I’ve then given you a sneak peek at what’s to come in the next chapters and where you can go and look up all those references you’ll see going through the book.
In the following chapters, you will see examples for each of the cards in EoP and some of its extensions. Having read this chapter, you are now in a position to jump straight in and start threat modeling, and for each card being played, either by you or other players, you can look it up and see one or more examples to help you understand the threat and give you an indication of where it might occur in your architecture. Happy threat modeling!
