After a six hour delay due to technical problems *before* my journey even started I'm finally on the plane and waiting for take off. Tag an additional five hour delay due to a missed connection in New York and this quickly become a very, very long trip. Perhaps my longest ever. Ah well, the price we pay for living at the end of the world, I guess.

I'm on my way to Scottsdale Arizona for CSI NetSec 2007. I'm presenting in the 'management' track (yes, you heard me) on our new Corporate Threat Modeling methodology. The idea we came up with is very simple actually. Take the basic principles and concepts used in application Threat Modeling, simplify a whole lot, stretch a little, sprinkle with some basic algebra, wrap it a GUI and you have a powerful tool for analyzing the threats your organization faces.

James has cobbled together a little C# app that implements the methodology and we plan to release the first version at the conference also (although we were still debugging over the phone when they finally started calling for me by name in the boarding lounge). But we have already used the concept in a huge corporate environment and I think it worked pretty nicely.

I'll post the slides and the tool here when I'm back next week.

If you happen to be at CSI, look me up and buy me some Red Bull.