A black background features a workshop title, a speaker's photo and details in the foreground, and the Def Con 34 logo in the background.

AppSec Village

**Context Profile for AppSec Village**

1. **Organization Mission & Cause:**
   AppSec Village is dedicated to advancing application security knowledge and practices. Their mission is to create a collaborative environment where security professionals, enthusiasts, and newcomers can learn, share, and grow. They focus on fostering a strong community around application security to enhance the overall security posture of applications and systems globally.

2. **Type of Activities:**
   - **Events:** AppSec Village organizes workshops, talks, and interactive sessions, particularly at major conferences like DEF CON.
   - **Community Programs:** They run volunteer-driven initiatives to engage and educate the community.
   - **Fundraising Campaigns:** Initiatives like the "Super Fan" campaign encourage community support through exclusive perks and merchandise.

3. **Tone of Voice:**
   The tone is friendly, engaging, and community-focused. They use an informal and enthusiastic style to connect with their audience, emphasizing inclusivity and collaboration. The language is accessible and often includes calls to action that are both inviting and motivating.

4. **Emoji Usage:**
   AppSec Village frequently uses emojis in their communications to add a playful and approachable element. Commonly used emojis include 🌞, 🔥, 🎉, 📣, 💜, and 🤗, which help convey excitement and a sense of community.

5. **Key Facts:**
   - **Founding Info:** While specific founding details are not provided, the organization is clearly established within the cybersecurity community, particularly associated with DEF CON.
   - **Scale & Impact:** They have a significant presence with multiple forms and email campaigns, indicating active engagement with their audience.
   - **Volunteer Info:** The organization is entirely volunteer-driven, highlighting the importance of community involvement in their operations.

6. **Writing Guidelines:**
   - **Style:** Use a conversational and inclusive tone. Engage the audience with direct calls to action and emphasize community involvement.
   - **Structure:** Incorporate bullet points and headings for clarity, especially when listing benefits or event details.
   - **Language:** Use simple, clear language that is accessible to both technical and non-technical audiences. Maintain a positive and encouraging tone.
   - **Emojis:** Use emojis to enhance communication, ensuring they align with the message's tone and context.

By focusing on these elements, AI-generated content can effectively align with AppSec Village's mission and communication style, fostering a stronger connection with their audience.

LXCL:Grants entry to the workshop.

Classroom Admission

LXCL:Please join the queue and as seats become available you will be granted access to the workshop.

Waitlist

Location: AppSec Village Classroom Presenter:&nbsp;<a fr-original-style="" href="https://sessionize.com/app/organizer/speaker/23842/39a9166c-43f9-4b8f-a8b1-eba4e06b58c3" style="text-decoration-color: currentcolor; user-select: auto; box-sizing: inherit;" target="_blank">Robert Hurlbut</a>, Threat Modeling Trainer and Consultant (Freelance) DescriptionThis workshop introduces the practical world of threat modeling, combining hands-on exercises and real-world scenarios. In particular, we will focus on how AI can enhance your threat modeling work plus introduce the basics of securing AI systems. We will review some of the latest threat intelligence and attack methods projected for 2026/2027, including vulnerabilities in LLMs and Agentic AI. Participants will engage in practical exercises inspired by real industry projects, such as integrating threat modeling into security-by-design and DevOps/MLOps workflows. Key features include threat-informed defense using MITRE frameworks such as ATLAS for real-world analysis, leveraging threat intelligence libraries to deepen threat understanding, and addressing modern challenges. By the end of this workshop, you will walk away not just with knowledge but also the ability to start practicing threat modeling effectively in your organization. Pre-requisites <a fr-original-style="text-align: start;" href="https://github.com/rhurlbut/DEFCON34-AppSecVillage" id="isPasted" rel="noopener noreferrer" style="text-align: start; text-decoration-color: currentcolor; user-select: auto; box-sizing: inherit;" target="_blank">https://github.com/rhurlbut/DEFCON34-AppSecVillage</a> 1. Preparation: &nbsp;&nbsp;Check out this video on &quot;Developing a Threat Modeling Mindset&quot; by Robert Hurlbut (part of Threat Modeling Hackathon 2025 Workshop): &nbsp; https://www.youtube.com/watch?v=1e4AUaNV9Yw &nbsp; (57 minutes) &nbsp;&nbsp;It gives a good background of many concepts we will cover in this workshop. &nbsp;&nbsp; 2. Handout(s):* DEFCON34-AppSecVillage-Threat-Modeling-with-AI-Workshop-RobertHurlbut.pdf* PayVault\_Case\_Study.pdf &nbsp; 3. Strongly encouraged:&nbsp;Please be sure to bring your laptop - most exercises will use your laptop.* Windows, Mac, or Linux OS* At least 64 GB is ideal for some local LLMs (not required, but recommended - see below)* At least 4 GB VRAM and/or a significant GPU (8-12 GB is great) to run local LLMs (not required, but recommended - see below) &nbsp; 3a.Run LLMs locally (ideal, less risk):* Install Docker (**https://www.docker.com/**)* Install Ollama (**https://ollama.com/**)* Download models locally (see **https://www.tmbench.com/ for comparisons of models useful for StrideGPT)** &nbsp; &nbsp; &nbsp; and/or &nbsp; &nbsp; &nbsp;&nbsp; 3b.Run LLMs remotely (more risk):* Be sure to have a working API key to an LLM: OpenAI ChatGPT, Microsoft CoPilot, Claude.ai, Google Gemini, X Grok, etc. 4. Look at StrideGPT &nbsp;Direct link: **https://stridegpt.streamlit.app/** (if not running an LLM locally - otherwise, it can be run locally through a localhost in a Docker container)Github: **https://github.com/mrwadams/stride-gpt** (instructions included on how to set up on Docker and to use Ollama) &nbsp;TM-Bench: **https://www.tmbench.com/** (Benchmark for LLM-Based Threat Modeling) &nbsp; &nbsp; &nbsp;&nbsp;

Hi <span contenteditable="false" data-custom-variable="{{firstname}}" fr-original-class="fr-deletable styled-tag-chip" fr-original-style="" style="color: rgb(42, 42, 196); overflow-wrap: anywhere; user-select: none; background-color: rgb(248, 248, 255); border: 1px solid rgb(191, 191, 255); border-radius: 4px; margin: 0px; padding: 1px 8px; font-size: 11px; display: inline-block; box-sizing: inherit;">First name, Thank you for reserving your spot for Introduction to AI-Enhanced Threat Modeling Workshop! We&#39;re excited to have you join us. Your tickets are booked &mdash; here&#39;s everything you need to know:📅 Date &amp; Time: Saturday, August 8, 10:15am- 1:00pm📍 Location: AppSec Village Classroom @ AppSec Village ⚠️ Please pay particular attention to the prerequisites so you come prepared and ready to get the most out of the session. We can&#39;t wait to see you there! Ailin Castellucci<a fr-original-style="" href="mailto:ailin@appsecvillage.com" rel="noopener noreferrer" style="text-decoration-color: currentcolor; user-select: auto; box-sizing: inherit;" target="_blank">ailin@appsecvillage.com</a> 💜 Love AppSec Village? If this workshop (or anything else we do) has been valuable to you, please consider becoming an <a fr-original-style="" href="https://www.zeffy.com/en-US/ticketing/appsec-village-super-fan" rel="noopener noreferrer" style="text-decoration-color: currentcolor; user-select: auto; box-sizing: inherit;" target="_blank">AppSec Village Super Fan</a>! Your support helps us keep bringing great content and events like this one to the community.&nbsp;

Location: AppSec Village Classroom Presenter: <a href="https://sessionize.com/app/organizer/speaker/23842/39a9166c-43f9-4b8f-a8b1-eba4e06b58c3" target="_blank">Robert Hurlbut</a>, Threat Modeling Trainer and Consultant (Freelance) DescriptionThis workshop introduces the practical world of threat modeling, combining hands-on exercises and real-world scenarios. In particular, we will focus on how AI can enhance your threat modeling work plus introduce the basics of securing AI systems. We will review some of the latest threat intelligence and attack methods projected for 2026/2027, including vulnerabilities in LLMs and Agentic AI. Participants will engage in practical exercises inspired by real industry projects, such as integrating threat modeling into security-by-design and DevOps/MLOps workflows. Key features include threat-informed defense using MITRE frameworks such as ATLAS for real-world analysis, leveraging threat intelligence libraries to deepen threat understanding, and addressing modern challenges. By the end of this workshop, you will walk away not just with knowledge but also the ability to start practicing threat modeling effectively in your organization. Pre-requisites <a href="https://github.com/rhurlbut/DEFCON34-AppSecVillage" target="_blank">https://github.com/rhurlbut/DEFCON34-AppSecVillage</a> 1. Preparation:   Check out this video on "Developing a Threat Modeling Mindset" by Robert Hurlbut (part of Threat Modeling Hackathon 2025 Workshop):   https://www.youtube.com/watch?v=1e4AUaNV9Yw   (57 minutes)   It gives a good background of many concepts we will cover in this workshop.    2. Handout(s):* DEFCON34-AppSecVillage-Threat-Modeling-with-AI-Workshop-RobertHurlbut.pdf* PayVault\_Case\_Study.pdf   3. Strongly encouraged: Please be sure to bring your laptop - most exercises will use your laptop.* Windows, Mac, or Linux OS* At least 64 GB is ideal for some local LLMs (not required, but recommended - see below)* At least 4 GB VRAM and/or a significant GPU (8-12 GB is great) to run local LLMs (not required, but recommended - see below)   3a.Run LLMs locally (ideal, less risk):* Install Docker (**https://www.docker.com/**)* Install Ollama (**https://ollama.com/**)* Download models locally (see **https://www.tmbench.com/ for comparisons of models useful for StrideGPT)**       and/or        3b.Run LLMs remotely (more risk):* Be sure to have a working API key to an LLM: OpenAI ChatGPT, Microsoft CoPilot, Claude.ai, Google Gemini, X Grok, etc. 4. Look at StrideGPT  Direct link: **https://stridegpt.streamlit.app/** (if not running an LLM locally - otherwise, it can be run locally through a localhost in a Docker container)Github: **https://github.com/mrwadams/stride-gpt** (instructions included on how to set up on Docker and to use Ollama)  TM-Bench: **https://www.tmbench.com/** (Benchmark for LLM-Based Threat Modeling)

AppSec Village

Introduction to AI-Enhanced Threat Modeling Workshop

300 Convention Center Dr

Classroom Admission

Free

Waitlist

Free

Add a donation for AppSec Village