Appsec Roundup - Jan 2025
An exciting month, with new threat modeling tools, cool thoughts on STAMP, bounds checking, ADRs and more!
Shostack + Friends Blog
Recent Blog Posts, Page 3
Talk at CERIAS
Adam speaking at CERIAS weekdly seminar
Hoarding, Debt and Threat Modeling
The psychology of getting started threat modeling
The Birth of the CVE System, on Hackers To Founders
Adam was on the Hackers To Founders podcast
National Cyber Incident Response Plan comments
Our comments on the National Cyber Incident Plan
Spatial Reasoning and Threat Modeling
Do diagrams leverage the brain in a different way?
Handling Pandemic-Scale Cyber Threats: Lessons from COVID-19
Emerging research on Cyber Public Health
Lessons for Cybersecurity from the American Public Health System
An important step towards cyber public health
Who Are 'We?' Power Centers in Threat Modeling
Appsec Roundup - Dec 2024
A virtual feast of appsec!
A Different Hackathon Design?
What should hackathon judges value?
Stocking stuffers for security nerds
You can find nerdier gifts, but you can’t buy them.
Gavle Goat Endures
The goat endures
Human Centered Security
An exciting new book on human-centered security.
Appsec Roundup - Nov 2024
A virtual feast of appsec!