Blackhat and Human Factors
BlackHat invites human factors work
Shostack + Friends Blog
Posts in category "science"
Leonardo da Vinci’s Gravity Experiment
An interesting discovery, hidden in Leonardo da Vinci's notebooks
Webb Telescope comparitor
A beautiful comparison site that allows you to see how the Webb telescope compares to Hubble.
A Science of Cybersecurity Public Health
I've been working with the CyberGreen Institute to develop public health as a way of thinking about cybersecurity.
Plants grow in lunar soil
Life will find a way!
The Grimes Model of Scams
Roger Grimes has an exciting new model of scams that's going to transform how we teach people ot defend against them.
The Evergreen Running Aground Problem
The Evergreen line has had another ship run aground.
Learning Lessons from Aviation
The definition of insanity is doing the same thing over and over and expecting different results. We can do better, and a major new report explains how.
What are we going to do: CO2 edition
What happened when Microsoft tried to buy climate abatements
The COVID testbed and AI
The pandemic gives us a chance to evaluate AI tools...you'll be shocked to discover how they did.
Thoughts on the Executive Order
A new article by Steve Bellovin and myself at Lawfare.
NSF Wants Data on Your Data Needs
The National Science Foundation is looking for information on needs for datasets.
Colonial Pipeline, Darkside and Models
The Colonial Pipeline shutdown story is interesting in all sorts of ways, and I can't delve into all of it.I did want to talk about one small aspect, which is the way responders talk about Darkside.
This time for sure, Pinky!
If everyone agrees on what we should do, why do we seem incapable of doing it?
Vaccines
You may have noticed that my end of the year posts are all science focused. Today, a set of resources on the COVID vaccines.
Just the Great Conjunction of Saturn and Jupiter...shot from the moon
It's easy to forget that the Lunar Reconnaissance Orbiter has been circling the moon for nearly a dozen years..
Dinosaur Feathers
Check out this close-up of a dinosaur tail preserved in amber!
We Need a Discipline of Cybersecurity Public Health
The video of my Distinguished Lecture at Ruhr University Bochum is now online, and I've got reference to share as well.
Sociotechnical Approach to Cyber Security
A recent post from Helen L. of the UK’s NCSC, A sociotechnical approach to cyber security, shares the context of socio-technical approaches.
Code: science and production
Phil Bull presents an interesting, generally convincing, argument in 'Why you can ignore reviews of scientific code by commercial software developers', with a couple of exceptions.
How Are Computers Compromised (2020 Edition)
Understanding the way intrusions really happen is a long-standing interest of mine.
Blackhat and Human Factors
As a member of the BlackHat Review Board, I would love to see more work on Human Factors presented there.
Empirical Evaluation of Secure Development Processes
Earlier this year, I helped to organize a workshop at Schloss Dagstuhl on Empirical Evaluation of Secure Development Processes. I think the workshop was a tremendous success.
Interesting Reads: Risk, Automation, lessons and more!
Just what the title says.
Threat Modeling Building Blocks
Threat modeling isn’t one task — its a collection of tasks that build on each other to produce more valuable insights.
Valuing CyberSecurity Research Datasets
A paper at the Workshop on the Economics of Information Security titled “Valuing CyberSecurity Research Datasets” focuses on the value of the IMPACT data sharing platform at DHS, and how the availability of data shapes research.
Polymorphic Warnings On My Mind
The more we see it, the more we ignore it.
NTSB on Uber (Preliminary)
[no description provided]
Doing Science with Near Misses
Near misses are an important source of information for avoiding accidents, and it's a shame we don't use them in cybersecurity.
Not Bugs, but Features
[no description provided]
“The Readability Of Scientific Texts Is Decreasing Over Time”
[no description provided]
Babylonian Triginometry
[no description provided]
The Evolution of Ctenophore Brains
[no description provided]
DNA Replicates, Filmed at 11.
[no description provided]
Bicycling and Risk
[no description provided]
“...the Elusive Goal of Security as a Scientific Pursuit”
[no description provided]