Capture the Flag events and eSports
A breakdown of CTFs and eSports
Shostack + Friends Blog
Recent Blog Posts, Page 29
Course announcement: Tampering in Depth!
I'm excited to announce that I'm hitting my STRIDE and Linkedin has released the second course in my in-depth exploration of STRIDE: Tampering.
Threat Modeling Building Blocks
Threat modeling isn’t one task — its a collection of tasks that build on each other to produce more valuable insights.
Interesting Reads, August 19
Just what the title says
Training At Embedded Systems Security Days
I'm excited to be teaming up with Alpha Strike and Limes Security to deliver training in Vienna November 6-8.
Toolbox: After a Conference
How to get back into the workflow after time away at conferences.
Blackhat Best Practice
Reminders about some conference best practices.
Actionable Followups from the Capital One Breach
What have we learned and what steps can we take?
Valuing CyberSecurity Research Datasets
A paper at the Workshop on the Economics of Information Security titled “Valuing CyberSecurity Research Datasets” focuses on the value of the IMPACT data sharing platform at DHS, and how the availability of data shapes research.
Happy Apollo Day!
Today is the 50th Anniversary of ‘One small step for a man, one giant leap for mankind.’
Books Worth Reading: Q2 2019 (Apollo Edition)
Some books worth reading, particularly related to space and history
Threat Modeling at Layer 8
Discussing online conflict on the AppSec Podcast
NIST on SDLs
Mitigating the Risk of Software Vulnerabilities by Adopting a Secure Software Development Framework (SSDF) from NIST is open for comment.
Safety and Security in Automated Driving
Let’s explore the risks associated with Automated Driving.
The Road to Mediocrity
The road to mediocre writing is paved with over-simplification and distraction.