100,00 Moon Shots
Amazing and impressive photographs of the moon.
Shostack + Friends Blog
Threat Modeling Thursday: The Human Element
I joined Caroline Wong on the Humans of Infosec Podcast to discuss The Human Element of Threat Modeling.
Threat Modeling Thursday: Machine Learning
For my first blog post of 2020, I want to look at threat modeling machine learning systems.
Echo, Threat Modeling and Privacy
I'm featured in (local NPR Affiliate) KUOW's Primed: Season 3, Episode 8.
Star Wars Episode 9 is a week away!
Almost there...
Encryption & Privacy Policy and Technology
A few tidbits in recent news.
Empirical Evaluation of Secure Development Processes
Earlier this year, I helped to organize a workshop at Schloss Dagstuhl on Empirical Evaluation of Secure Development Processes. I think the workshop was a tremendous success.
Goodbye, Feedburner
The time has come.
Books Worth Your Time (Q4)
Just what the title says...
The Gavle Goat is up
For 51 years, the gallant people of Gavle, Sweden, have been putting up a straw goat, and arsonists have been burning it.
Han Solo, Frozen in Carbonite
[no description provided]
Managed Attribution Threat Modeling
Let's talk CAKED, a threat model for managed attribution.
Message Sequence Charts
Swim lane diagrams have been formalized in message sequence charts - what that means.
Medical Device Security Standards
Recently, I've seen four cybersecurity approaches for medical devices, and we can learn by juxtaposing them.
Includes No Dirt: Healthcare Threat Modeling (Thursday)
“Includes No Dirt” is a threat modeling approach by William Dogherty and Patrick Curry of Omada Health, and I've been meaning to write about it since it came out.