2001: Agentic Odyssey in Threat Modeling

Join us for “2001: Agentic Odyssey”, a hands-on, drop-in workshop where we will threat model the HAL 9000 system from 2001: A Space Odyssey as if it were a modern agentic AI system (LLM + tools + permissions + side effects).

🔍 I will provide a HAL DFD, and together we will mark trust boundaries and engage in classic “what can go wrong?” threat identification. Participants will then split into small groups to build attack-tree branches and translate them into Fault Tree Analysis (FTA) using AND/OR logic and minimal cut sets, including lightweight probability estimates to prioritize the most likely failure chains.

🔧 We will conclude by transforming those failure paths into automation-ready test ideas (fault injection, invariants, evidence) and optionally drafting a structured HAL threat model for submission to the OWASP Threat Model Library. This workshop is designed for everyone to contribute in 10-15 minutes, while advanced participants can dive deeper into FTA and prioritization. Each stage allows for drop-ins at any time!