The Birth of the CVE System, on Hackers To Founders
Adam was on the Hackers To Founders podcast
Shostack + Friends Blog
Recent Blog Posts, Page 11
National Cyber Incident Response Plan comments
Our comments on the National Cyber Incident Plan
Spatial Reasoning and Threat Modeling
Do diagrams leverage the brain in a different way?
Handling Pandemic-Scale Cyber Threats: Lessons from COVID-19
Emerging research on Cyber Public Health
Lessons for Cybersecurity from the American Public Health System
An important step towards cyber public health
Who Are 'We?' Power Centers in Threat Modeling
I had planned to start 2025 with a more positive note, but the loss of Amit Yoran, who was only a few years older than me, has hit me hard. I first met Amit at a Computers, Freedom and Privacy conference in the early 90s. He was in his West Point uniform, which was not typical for attendees of the conference. So I went over and struck up a conversation, and we continued over probably 30 years. I miss him. His memorial service will be on Jan 8, in Fairfax, VA. [Link, date updated.]
Appsec Roundup - Dec 2024
A virtual feast of appsec!
A Different Hackathon Design?
What should hackathon judges value?
Stocking stuffers for security nerds
You can find nerdier gifts, but you can’t buy them.
Gavle Goat Endures
The goat endures
Human Centered Security
An exciting new book on human-centered security.
Appsec Roundup - Nov 2024
A virtual feast of appsec!
Risk Talk at JPL
My talk at JPL
The Four Question Framework for Threat Modeling
Our latest whitepaper!
Black Friday Sale
Our biggest black friday sale this year!