Star Wars Episode 9 is a week away!
Almost there...
Shostack + Friends Blog
Encryption & Privacy Policy and Technology
A few tidbits in recent news.
Empirical Evaluation of Secure Development Processes
Earlier this year, I helped to organize a workshop at Schloss Dagstuhl on Empirical Evaluation of Secure Development Processes. I think the workshop was a tremendous success.
Goodbye, Feedburner
The time has come.
Books Worth Your Time (Q4)
Just what the title says...
The Gavle Goat is up
For 51 years, the gallant people of Gavle, Sweden, have been putting up a straw goat, and arsonists have been burning it.
Han Solo, Frozen in Carbonite
[no description provided]
Managed Attribution Threat Modeling
Let's talk CAKED, a threat model for managed attribution.
Message Sequence Charts
Swim lane diagrams have been formalized in message sequence charts - what that means.
Medical Device Security Standards
Recently, I've seen four cybersecurity approaches for medical devices, and we can learn by juxtaposing them.
Includes No Dirt: Healthcare Threat Modeling (Thursday)
“Includes No Dirt” is a threat modeling approach by William Dogherty and Patrick Curry of Omada Health, and I've been meaning to write about it since it came out.
Interesting Finds: Liberalism, machine learning, encryption and learning
Some interesting things I've recently found
Who Are We Kidding with Attacker-Centered Threat Modeling?
Don't go into Threat Modeling with this mindset.
Interesting Reads: Risk, Automation, lessons and more!
Just what the title says.
Quick Threat Model Links October 2019
Just a few things for now