--- title: BSidesSF 2026 – Your Threat Model Is Lying To You: Why... description: A BSidesSF 2026 conference talk by Farshad Abasi arguing that traditional threat modeling focused solely on design is insufficient in 2026. The talk challenges... canonical: https://daily.dev/posts/bsidessf-2026-your-threat-model-is-lying-to-you-why-modeling-the-design-isn-t-enough-in-2026-wtfelo1z9 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: BSidesSF 2026 – Your Threat Model Is Lying To You: Why Modeling The Design Isn’t Enough In 2026 | daily.dev og:description: A BSidesSF 2026 conference talk by Farshad Abasi arguing that traditional threat modeling focused solely on design is insufficient in 2026. The talk challenges... og:url: https://daily.dev/posts/bsidessf-2026-your-threat-model-is-lying-to-you-why-modeling-the-design-isn-t-enough-in-2026-wtfelo1z9 og:image: https://api.daily.dev/og/posts/WTfelO1Z9.png og:image:alt: BSidesSF 2026 – Your Threat Model Is Lying To You: Why Modeling The Design Isn’t Enough In 2026 og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # BSidesSF 2026 – Your Threat Model Is Lying To You: Why Modeling The Design Isn’t Enough In 2026 **[Security Boulevard](https://daily.dev/sources/securityboulevard)** · 1 min read · 0 upvotes · 0 comments ## Summary A BSidesSF 2026 conference talk by Farshad Abasi arguing that traditional threat modeling focused solely on design is insufficient in 2026. The talk challenges practitioners to go beyond modeling the intended design and account for runtime behavior, implementation gaps, and real-world attack surfaces that static design-time models miss. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [BSides SF 2026: Looking At Security Beyond The Next Big Bet](https://daily.dev/posts/bsides-sf-2026-looking-at-security-beyond-the-next-big-bet-b6e7cm3ui) · GitGuardian · 0 upvotes · 0 comments - [BSidesSF 2026 – More Role Models In AppSec: How To Get It Right](https://daily.dev/posts/bsidessf-2026-more-role-models-in-appsec-how-to-get-it-right-gkjx5j5ox) · Security Boulevard · 0 upvotes · 0 comments - [BSidesSF 2026 – Securing Space: The Next Frontier For Security Engineers](https://daily.dev/posts/bsidessf-2026-securing-space-the-next-frontier-for-security-engineers-3d26gvdnd) · Security Boulevard · 0 upvotes · 0 comments - [BSides312 2026: Security Basics Under New Pressure](https://daily.dev/posts/bsides312-2026-security-basics-under-new-pressure-al52qlzpi) · GitGuardian · 0 upvotes · 0 comments - [BSidesSF 2026 – Your Arch-Nemesis Is A Data Scientist: What’s The Difference Between Security And Privacy Work?](https://daily.dev/posts/bsidessf-2026-your-arch-nemesis-is-a-data-scientist-what-s-the-difference-between-security-and-pr-bxpcy8zyx) · Security Boulevard · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#appsec](https://daily.dev/tags/appsec) [View this post on daily.dev](https://daily.dev/posts/bsidessf-2026-your-threat-model-is-lying-to-you-why-modeling-the-design-isn-t-enough-in-2026-wtfelo1z9) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"BSidesSF 2026 – Your Threat Model Is Lying To You: Why Modeling The Design Isn’t Enough In 2026","url":"https://daily.dev/posts/bsidessf-2026-your-threat-model-is-lying-to-you-why-modeling-the-design-isn-t-enough-in-2026-wtfelo1z9","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/bsidessf-2026-your-threat-model-is-lying-to-you-why-modeling-the-design-isn-t-enough-in-2026-wtfelo1z9"},"datePublished":"2026-07-09T15:34:49.667Z","dateModified":"2026-07-09T16:00:54.932Z","description":"A BSidesSF 2026 conference talk by Farshad Abasi arguing that traditional threat modeling focused solely on design is insufficient in 2026. The talk challenges...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/8fe9eeb967de205fd6743e2535f16178?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/8fe9eeb967de205fd6743e2535f16178?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Security Boulevard","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Security Boulevard","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/3613c832180040de8d85bb29f74395be","url":"https://daily.dev/sources/securityboulevard"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/bsidessf-2026-your-threat-model-is-lying-to-you-why-modeling-the-design-isn-t-enough-in-2026-wtfelo1z9","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,appsec","timeRequired":"PT1M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Security Boulevard","item":"https://daily.dev/sources/securityboulevard"},{"@type":"ListItem","position":3,"name":"BSidesSF 2026 – Your Threat Model Is Lying To You: Why Modeling The Design Isn’t Enough In 2026"}]} ```