Threat Modelling Village: Blueprint to Break

Stop hacking blindly. Start modelling.

Threat modelling is the missing link between the people who build systems and the people who break them. The Threat Modelling Village turns threat modelling from a documentation exercise into a hands-on, collaborative security activity where attackers, defenders, architects, developers and security practitioners work together to understand how real systems can fail before an attacker does.

At the Village, participants will learn the fundamentals of threat modelling and immediately put them into practice. Working in small teams, you will analyze realistic system architectures, identify threats and attack paths, challenge assumptions, and propose practical security mitigations. No lengthy reports required – just models, threats, attack paths and clarity of thought.

Previous Experience

No previous threat modelling experience is required. Beginners are welcome; participants with existing threat modelling, AppSec, development, architecture, red-team or security experience are equally encouraged to join.

Goal of the Competition
By the end of the session, participants will:
  • Understand the core principles of threat modelling and the 4-Question Framework.
  • Learn how to read and reason about a system architecture from a security perspective.
  • Work collaboratively to identify threats, attack paths and security weaknesses.
  • Practise turning architectural observations into a concise, usable threat model.
  • Challenge assumptions and learn how different security practitioners approach the same system.
  • Take away practical techniques that can be applied to their own projects, architectures and security assessments.
Rules of Engagement
  • Equipment: A laptop, a willingness to learn, and a collaborative spirit.
  • Group size: Approximately 8–10 participants per one-hour interval (for the competitive track), divided into smaller working groups where appropriate.
  • Slots: Participants join at the beginning of an hourly interval. We will run two such slots per day. Pre-registration is required. Walk-ins are welcome subject to availability..
  • Crash course: We will provide a crash course to threat modeling. Refer to schedule
  • Challenge Format: Participants then work through a prepared system architecture, identifying threats, attack paths and potential mitigations in a short period of time.
  • Background Activities in Village: Besides the Threat Modeling Challenge, we also host a “Wall of Threats” where participants may contribute findings, based on their interpretations of our challenge statements, and allow the wider community to gain a better appreciation of threats on such systems.
  • At the stand: We will provide the prepared system architecture/challenge materials, threat-modelling templates and facilitator guidance.

PRIZES

TBD

REGISTRATION

Reserve a slot in advance, with walk-ins accepted subject to availability.
SPONSORED BY
HACKING VILLAGE

Other Competitions

CyberDojoTM CTF

Overview Back to Contests CyberDojoTM CTF CyberDojoTM CTF is back in town with a fresh batch of challenges ..

Meridian Malware

Overview Back to Contests Meridian Malware Welcome to Meridian Bank. On paper it’s a mid-sized retail ..

Target John

Target John is a competition where participants receive several details about a real target and they have to ..

Sponsors & Partners

They help us make this conference possible.

POWERED BY

Orange Business is a key division of Orange Romania, specializing in providing cutting-edge communication, technology, and digital transformation solutions tailored to businesses of all sizes. With a strong emphasis on innovation, Orange Business offers a wide array of services, including high-speed connectivity, cloud computing, cybersecurity, Internet of Things (IoT), and managed services. Their mission is to support organizations in their digital transformation journey by enhancing operational efficiency, improving customer experience, and maintaining a competitive edge in a rapidly changing digital environment.

Orange Business combines deep technological expertise with a customer-centric approach, ensuring that each solution is customized to meet the specific needs of their clients. Their commitment to innovation and excellence makes them a trusted partner for businesses seeking to thrive in the digital age.

PLATINUM PARTNER

GOLD PARTNERS

SILVER PARTNERS

BRONZE PARTNERS

HACKING VILLAGE PARTNERS

EXHIBITORS

VIP LOUNGE POWERED BY
ORGANIZER
INTERNATIONAL COMMUNITY PARTNERS
MEDIA PARTNERS