About Adam Shostack

Adam is a leading expert on threat modeling, and a consultant, expert witness, author and game designer. He's a member of the BlackHat Review Board, and helped create the CVE and many other things.

Shostack has decades of experience delivering security. His experience ranges across the business world from founding startups to nearly a decade at Microsoft.

While at Microsoft, he drove the Autorun fix into Windows Update, was the lead designer of the SDL Threat Modeling Tool v3 and created the Elevation of Privilege game. Adam is the author of Threat Modeling: Designing for Security, and the co-author of The New School of Information Security.

While not consulting or training, Shostack serves as an advisor to a variety of companies and academic institutions.