Shostack + Friends Blog

Posts in category "science of risk management"

This time for sure, Pinky!

If everyone agrees on what we should do, why do we seem incapable of doing it? (23 Apr 2021)

Podcast with Sidney Dekker

This is a really interesting podcast interview with Sidney Dekker, who's one of the most important thinkers in safety. (26 Aug 2020)

Evidence Based Security

Check out “The Need for Evidence Based Security” by Chris Frenz. (04 Jun 2020)

Subscribe (RSS/Mail)

RSS: If you'd like to subscribe, you can get the ATOM feed here.

Email: If you'd like every blog post by email, a service like this might help. If you'd like a lower volume set of updates on what Adam is doing, Adam's New Thing gets only a few messages a year, guaranteed.

FDA Threat Modeling Playbook Now Available

30 Nov 2021

How to threat model medical devices? The FDA has released a playbook!

Medical Device Threat Modeling Webinar

21 Nov 2021

An important webinar by MDIC about the medical device threat modeling playbook is now available!

Learning Lessons from Aviation

15 Nov 2021

The definition of insanity is doing the same thing over and over and expecting different results. We can do better, and a major new report explains how.

25 Years of Appsec - Appsec Global

11 Nov 2021

Adam is delivering the opening keynote for OWASP Global Appsec 2021 with a 25 year restrospective on the history of appsec and a look into its future.

Our site works best with Javascript enabled, however we have done our best to minimize any negative impacts to your experience without it.

Shostack + Friends Blog

Posts in category "science of risk management"

This time for sure, Pinky!

Podcast with Sidney Dekker

Evidence Based Security

NTSB on Uber (Preliminary)

Fire and building codes