Editing Software Engineering (Winter 2026) (section)

=== February 5 (Thursday) -- Security and Threat Modeling ===

'''Before Class'''
* Read [https://canvas.uw.edu/courses/1878637/files/folder/Week%205?preview=144956444 Reading Note 9]
* Read the [https://www.threatmodelingmanifesto.org/ Threat Modeling Manifesto ]
* Read Oosthoek, Cable, and Smaragdakis [https://canvas.uw.edu/courses/1878637/files/folder/Week%205?preview=144956558 A tale of two markets: Investigating the ransomware payments economy] 
* Watch my mini-lecture on [https://canvas.uw.edu/courses/1878637/files/folder/Week%205?preview=144956497 Security and Threat Modeling]

'''Class Goals:'''
* Discuss Reading Note 9
* Activity: Threat modeling
* Standup
* Hands-on / triage issues with Tasks 4 and 5
* Introduce 'planning poker'
* Examine your kanban boards and add additional stories
* Take a look at the user stories in your kanban and play a round of planning poker with them
<!--
'''In-class Materials:'''
* [ Discussion board]
* [ Class recording]
-->
<!--
'''Optional:'''
* If you're interested in learning more about cybersecurity risk from an international perspective, this [https://www.infosecurityeurope.com/en-gb/blog/future-thinking/new-frameworks-vulnerability-risk-assessment.html blog post from Information Security Europe] describes alternatives to the US government's CISA frameworks.
-->