Answering 'What Are We Working On' When Remote
How do we replace the in-person whiteboard sessions essential to Threat Modeling when we are distanced and working remotely?
Shostack + Friends Blog
Friday Star Wars
Pandemic Safety in Star Wars
Medical Device Threat Modeling
New training being developed, seeking interest.
The COVID Pandemic
I know many readers are here for the threat modeling, and I could claim that this is the “what are we going to do about it” post, which it is, but I don't want to have to blog all threat modeling all the time. So this is the “Seattle is a month into COVID-19” post.
Threat Modeling with Questionnaires
This post comes from a conversation I had on Linkedin with Clint Gibler.
Free Threat Modeling Training
While I can't fix things, I can at least make my LinkedIn courses free for a time.
Amazon's 'Alexa Built-in' Threat Model
Exploring supply chain threat modeling with Alexa
Threat Modeling Training at Blackhat 2020
At Blackhat this summer, I'll be offering threat modeling training at Blackhat. Last year, these sold out quickly, so don't wait!
Threat Model Thursday: BIML Machine Learning Risk Framework
Risk Framework and Machine Learning
Blackhat and Human Factors
As a member of the BlackHat Review Board, I would love to see more work on Human Factors presented there.
Repudiation Now Live on Linkedin Learning
My course, “Repudiation in Depth” is now live on Linkedin Learning. This is the fourth course in my Learning Threat Modeling series.
Threat Model Thursday: Games
For reasons I can't quite talk about yet, this has been a super busy time, and I look forward to sharing the exciting developments that have kept me occupied.
Threat Model Thursday: Files
Have you considered the idea that “Files are Fraught With Peril” lately? Maybe you should...
Cryptographic Excitement
A couple big stories in the realm of cryptography that got me excited.
Enter the SpudNet
A new game to teach networking and security concepts.