Shostack + Friends Blog

Friday Star Wars

Pandemic Safety in Star Wars (27 Mar 2020)

Wide view of in-person threat modeling training with Adam Shostack at the whiteboards

Medical Device Threat Modeling

New training being developed, seeking interest. (26 Mar 2020)

I know many readers are here for the threat modeling, and I could claim that this is the “what are we going to do about it” post, which it is, but I don't want to have to blog all threat modeling all the time. So this is the “Seattle is a month into COVID-19” post. (23 Mar 2020)

Threat Modeling with Questionnaires

This post comes from a conversation I had on Linkedin with Clint Gibler. (19 Mar 2020)

LinkedIn Learning course: Threat Modeling: Spoofing In Depth

Free Threat Modeling Training

While I can't fix things, I can at least make my LinkedIn courses free for a time. (17 Mar 2020)

amazon alexa units wearing dark glasses and black fedoras

Amazon's 'Alexa Built-in' Threat Model

Exploring supply chain threat modeling with Alexa (05 Mar 2020)

Threat Modeling Training at Blackhat 2020

At Blackhat this summer, I'll be offering threat modeling training at Blackhat. Last year, these sold out quickly, so don't wait! (02 Mar 2020)

Threat Model Thursday: BIML Machine Learning Risk Framework

Risk Framework and Machine Learning (27 Feb 2020)

Blackhat and Human Factors

As a member of the BlackHat Review Board, I would love to see more work on Human Factors presented there. (26 Feb 2020)

Repudiation Now Live on Linkedin Learning

My course, “Repudiation in Depth” is now live on Linkedin Learning. This is the fourth course in my Learning Threat Modeling series. (11 Feb 2020)

Threat Model Thursday: Games

For reasons I can't quite talk about yet, this has been a super busy time, and I look forward to sharing the exciting developments that have kept me occupied. (06 Feb 2020)