Scale to Zero

Adam on the Scale to Zero podcast

”Get ready for a paradigm shift in how you build software. In this episode of the Scale to Zero podcast with Adam Shostack, we crash-landed with a powerful concept called Secure by Design! It's not just a mantra for the Rebel Alliance, it's the key to building unbreachable software from the very first line of code.” I was on the Cloudanix podcast with Abhiram Shindikar.

< /iframe> </p> <p class="postmeta">Originally published by Adam on 12 Jun 2024 <br>Categories:   <a href="/blog/category/books">books</a>   <a href="/blog/category/software-engineering">software engineering</a>   <a href="/blog/category/security">security</a> </p> </article> </section> <aside class="sidebar"> <h3>Our Favorite Content</h3> <p><a href="/blog/category/threat-modeling/">General threat modeling posts</a></p> <p><a href="/blog/the-security-principles-of-saltzer-and-schroeder/">The Security Principles of Saltzer and Schroeder, illustrated with Star Wars</a></p> <p><a href="/blog/category/star-wars/">Other Star Wars blog posts</a></p> <p><a href="/blog/modeling-attackers-and-their-motives/">Modeling attackers and their motives</a></p> <p><a href="/blog/doing-science-with-near-misses/">Doing science with near misses</a></p> <p><a href="/blog/category/threats-book/">Posts about Adam’s “Threats” book</a></p> <p><a href="/blog/category/threat-modeling-book/">Posts about Adam’s “Threat Modeling” book</a></p> <p><a href="/blog/category/the-new-school/">Posts about “The New School of Information Security” book</a></p> <p><a href="/blog/about/">About this blog</a></p> <div class="divider"> </div> <h3>Subscribe (RSS/Mail)</h3> <p>RSS/ATOM: The ATOM <a href="https://shostack.org/feed.xml">feed is here</a>. We recommend RSS as the best way to follow this blog, and think generally RSS is the best way to take control of the information you take in. You can read our thinking <a href="https://shostack.org/blog/take-control-of-what-you-read/">here</a>.</p> <p>Email: If you’d like a lower volume set of updates on what Adam is doing, <a href="/contact/">Adam’s New Thing</a> gets only a few messages a year, guaranteed. We include a subset of posts in each.</p> <div class="divider"> </div> <h3>Recent posts</h3> <div class="blogs-list"> <article> <a href="/blog/97-things/" class="link2post"> <img alt="The top of the cover of 97 things with photos of authors" loading="lazy" decoding="async" class="post-main-img" src="/images/blog/img/2024/97things-cover-excerpt-300w.webp" width="300" height="112"> <h3 class="blog-feed-post-title">97 Things Every Application Security Professional Should Know</h3> </a> <p class="blog-feed-post-date">18 Jun 2024</p> <p class="blog-feed-post-excerpt">Proud to be an O’Reilly author!</p> </article> <article> <a href="/blog/first-workshop-on-cyber-public-health/" class="link2post"> <img alt="The workshop report cover" loading="lazy" decoding="async" class="post-main-img" src="/images/blog/img/2024/cyber-public-health-workshop-banner-300w.webp" width="300" height="115"> <h3 class="blog-feed-post-title">First Workshop on Cyber Public Health</h3> </a> <p class="blog-feed-post-date">17 Jun 2024</p> <p class="blog-feed-post-excerpt">The first workshop on cyber public health was so exciting. Check out the report!</p> </article> <article> <a href="/blog/lockbit-study-in-public-health/" class="link2post"> <img alt="A headline about 7,000 lockbit keys" loading="lazy" decoding="async" class="post-main-img" src="/images/blog/img/2024/lockbit-300w.webp" width="300" height="112"> <h3 class="blog-feed-post-title">Lockbit, a study in public health</h3> </a> <p class="blog-feed-post-date">15 Jun 2024</p> <p class="blog-feed-post-excerpt">Why is it hard to count lockbit infections?</p> </article> <article> <a href="/blog/why-i-dont-engage-with-sean-hastings/" class="link2post"> <img alt="An excerpt from a letter about the charges against Mr. Hastings" loading="lazy" decoding="async" class="post-main-img" src="/images/blog/img/2024/sean-hastings-charged-excerpt-300w.webp" width="300" height="112"> <h3 class="blog-feed-post-title">Why I don't engage with Sean Hastings</h3> </a> <p class="blog-feed-post-date">14 Jun 2024</p> <p class="blog-feed-post-excerpt">Mr. Hastings has been charged with crimes against me, and the police advise me to not engage.</p> </article> </div> <div class="divider"> </div> <h3>Popular Blog Topics</h3> <p><a href="/blog/category/threat-model-thursday/">Threat Model Thursday</a>, <br>exploring specific published threat models</p> <p><a href="/blog/category/threat-modeling/">Threat Modeling</a> (general topic)</p> <p><a href="/blog/category/application-security/">Application Security</a></p> <p><a href="/blog/category/software-engineering/">Software Engineering</a></p> <p><a href="/blog/category/cloud-security/">Cloud Security</a></p> <p><a href="/blog/category/compliance/">Compliance</a></p> <p><a href="/blog/category/ai/">AI</a> + <a href="/blog/category/chatgpt/">ChatGPT</a></p> <p><a href="/blog/category/privacy/">Privacy</a> + <a href="/blog/category/personal-security/">Personal Security</a></p> <p><a href="/blog/category/research-papers/">Research</a> + <a href="/blog/category/reports-and-data/">Reports</a></p> <p><a href="/blog/category/book-reviews/">Book Reviews</a></p> <p><a href="/blog/category/news/">News</a></p> <p><a href="/blog/category/podcasts/">Podcasts</a>, <a href="/blog/category/videos/">Videos</a> + <a href="/blog/category/webinars/">Webinars</a></p> <div class="divider"> </div> </aside> </main> <noscript><p style="text-align:center;font-family:'Sarabun',sans-serif;font-weight:600;font-style:italic;">Our site works best with Javascript enabled, however we have done our best to minimize any negative impacts to your experience without it.</p></noscript> <footer> <ul> <li> <a href="https://www.linkedin.com/in/shostack/" target="_blank" rel="noopener" class="icon"> <i class="fab fa-linkedin fa-lg" title="Shostack on LinkedIn"></i> </a> </li> <li> <a href="https://github.com/adamshostack/" target="_blank" rel="noopener" class="icon"> <i class="fab fa-github fa-lg" title="Shostack on GitHub"></i> </a> </li> <li> <a href="https://youtube.com/c/shostack" target="_blank" rel="noopener" class="icon"> <i class="fab fa-youtube fa-lg" title="Shostack Videos on YouTube"></i> </a> </li> <li class="center">© 2021-<noscript>2023</noscript><script>document.write(new Date().getFullYear());</script> Shostack + Associates  |  <a href="/privacy-policy/" class="icon">Privacy Policy</a></li> <li> <a href="/contact/" class="icon"> <i class="fas fa-envelope fa-lg" title="Contact Shostack + Associates"></i></a> </li> <li> <a href="tel:+1-866-277-7328" class="icon"> <i class="fas fa-phone-alt fa-lg" title="Phone: +1 866-APP-SECURE"></i></a> </li> <li> <a href="/sitemap/" class="icon"> <i class="fas fa-sitemap fa-lg" title="Sitemap"></i></a> </li> </ul> </footer> <script type="text/javascript" src="https://code.jquery.com/jquery-3.6.0.min.js"></script> <script type="text/javascript"> $(document).ready(function(){ // Toggle mobile menu $('#menu-icon').click(function(){ if($('#menu').hasClass('is-active')) { $(this).attr('aria-expanded', 'false'); $('#menu').removeClass('is-active'); } else { $('#menu').addClass('is-active'); $(this).attr('aria-expanded', 'true'); } }); // Toggle submenus on mobile $('.fa-chevron-down').click(function(){ if($(this).parents('.has-submenu').hasClass('is-active')) { $(this).parents('.has-submenu').removeClass('is-active'); $(this).parents('.submenu').attr('aria-expanded', 'false'); } else { $(this).parents('.has-submenu').addClass('is-active'); $(this).parents('.submenu').attr('aria-expanded', 'true'); } }); // Homepage & 3up: Reverse header on scroll $(window).scroll(function(){ if($('.topmenubar').hasClass('start-white')) { if($(this).scrollTop() > 1) { $('.topmenubar').addClass('reversed'); $('#main-logo').attr("src", "/img/Shostack-logo-white.png"); } if($(this).scrollTop() <= 1) { $('.topmenubar').removeClass('reversed'); $('#main-logo').attr("src", "/img/Shostack-logo-purple.png"); } } }); // Inner Pages: set width of title underpill on page load let titlewidth = $('.page-title').width(); let pillwidth = titlewidth + 48; $('#title-underpill').width(pillwidth); }); </script>  <script type="text/javascript" id="hs-script-loader" async defer src="//js.hs-scripts.com/23580113.js"></script>   </body> </html>