Security BSides Prague 2026

In this session, we go back to where systems begin: the whiteboard - where designs take shape and the right question is: what could go wrong? That’s the essence of threat modelling: finding weaknesses before anything is built.

In this hands-on workshop, we use the Elevation of Privilege card game, created by Adam Shostack, to turn threat modelling into an engaging, team-based activity. Working in small groups, you’ll analyse a system architecture, applying cards aligned to STRIDE to uncover realistic threats. It’s structured, collaborative, and built around discussion, not just tools.

Together, you’ll learn how to:

- Identify vulnerabilities early in the design phase
- Explore attack categories through a six-part framework
- Experience how serious security work can also be fun

You’ll leave with a practical, repeatable approach to bring threat modelling into your teams from day one.