About Adam Shostack

Adam Shostack

Adam Shostack is a leading expert on threat modeling, and a consultant, entrepreneur, technologist, author and game designer. He's a member of the BlackHat Review Board, and helped found the CVE and many other things. He could claim to be a visionary or a thought-leader, but those are just tools to an end: improving security.

Shostack has decades of experience delivering security. His experience ranges across the business world from founding startups to nearly a decade at Microsoft.

While at Microsoft, he drove the Autorun fix into Windows Update, was the lead designer of the SDL Threat Modeling Tool v3 and created the Elevation of Privilege game. Adam is the author of Threat Modeling: Designing for Security, and the co-author of The New School of Information Security.

While not consulting or training, Shostack serves as an advisor to a variety of companies and academic institutions.