In this session, we will explore how advanced AI-driven approaches can transform the way organizations design, operationalize, and continuously evolve their application security posture.

Philip Morris International will share their real-world experience in building a comprehensive threat modeling framework leveraging Microsoft technologies with focus on using AI models to support the quality control.

Attendees will gain insights into how PMI structured their threat modeling process, incorporated it into modern development practices, and aligned it with Zero Trust and secure-by-design principles.

Beyond design-time security, the session will also highlight how these threat models are seamlessly integrated into ongoing security monitoring trough log ingestion and Sentinel analytical rules creation. By connecting threat modeling outputs with Microsoft security solutions, organizations can achieve continuous visibility—enabling more effective detection, prioritization, and response to security threats across the application lifecycle.

Key takeaways:

• How to build and operationalize threat models using Microsoft security platforms
• Integrating threat modeling into DevSecOps and AI-driven workflows
• Bridging the gap between design-time security and runtime monitoring
• Real-world lessons learned from Philip Morris International’s journey

This session is ideal for IT/ Security/ AI leaders, security architects, and developers looking to move from static security design toward adaptive, intelligence-driven application protection.