Phishing Defenses
Phishing behaviors, as observed in the wild.
Shostack + Friends Blog
Posts in category "human factors"
Human-Centered Security
Threat Modeling for UX Designers with Adam Shostack on Heidi Trost's podcast
Fast, Cheap + Good Whitepaper
Threat modeling doesn't need to be a slow, heavyweight activity!
The Updates Must Go Through
The timing of updates is not coincidental.
Empirical Evaluation of Secure Development Processes
Earlier this year, I helped to organize a workshop at Schloss Dagstuhl on Empirical Evaluation of Secure Development Processes. I think the workshop was a tremendous success.
Games and Cards
[no description provided]
John Harrison's Struggle Continues
[no description provided]
Introducing Cyber Portfolio Management
[no description provided]
Modeling Attackers and Their Motives
There are a number of reports out recently, breathlessly presenting their analysis of one threatening group of baddies or another. Most readers should, at most, skim their analysis of the perpetrators. Read on for why.