The National CyberSecurity Strategy: Liability is Coming
Shostack + Friends Blog
Posts in category "government"
Major Cyber Incidents Investigations
I'm thrilled this how to guide for standing up new investigations is available.
Congratulations to the CSRB!
I'm thrilled the first CSRB report is available.
FDA Draft Premarket Guidance
The FDA has issued draft guidance for pre-market security
Medical Device Threat Modeling Webinar
An important webinar by MDIC about the medical device threat modeling playbook is now available!
IoT Security & Threat Modeling
Expanding on the UK Government's ‘The Uk Code of Practice for Consumer IoT Security’ and how it aligns with Threat Modeling.
The Updates Must Go Through
The timing of updates is not coincidental.
On Monopolies
In a simpler age, Matt Stoller famously lost his job for critiquing Google.
How Are Computers Compromised (2020 Edition)
Understanding the way intrusions really happen is a long-standing interest of mine.
Cryptographic Excitement
A couple big stories in the realm of cryptography that got me excited.
Encryption & Privacy Policy and Technology
A few tidbits in recent news.
Medical Device Security Standards
Recently, I've seen four cybersecurity approaches for medical devices, and we can learn by juxtaposing them.
NIST on SDLs
Mitigating the Risk of Software Vulnerabilities by Adopting a Secure Software Development Framework (SSDF) from NIST is open for comment.
The Unanimous Declaration of the Thirteen United States of America
When was the last time you looked over what our country was founded upon?
The Unanimous Declaration of the 13 United States
When was the last time you looked over what our country was founded upon?
CVE Funding and Process
[no description provided]
Half the US population will live in 8 states
Our country's population is shifting, which could have a dramatic effect on politics.
Keeping the Internet Secure
[no description provided]
Threat Model Thursday: Architectural Review and Threat Modeling
[no description provided]
Fire and building codes
[no description provided]