Shostack + Friends Blog

The Threat Modeling Book has been featured on a list of resources by Digital Guardian. (12 Dec 2018)

The House Oversight Committee has released a scathing report on Equifax... (11 Dec 2018)

J.E. Gordon’s Structures, or Why Things Don’t Fall Down is a fascinating and accessible book. Why don’t things fall down? It turns out this is a simple question with some very deep answers. (07 Dec 2018)

The Gavle Goat is up. (29 Nov 2018)

Some books worth reading. (26 Nov 2018)

Check out my talk from Blackhat 2018 (15 Nov 2018)

Some recent changes in the weather... (09 Nov 2018)

Airplanes are filthy... (01 Nov 2018)

Another podcast, another chance to talk about Threat Modeling (29 Oct 2018)

An extended version of Elevation of Privilege, now with Privacy. (17 Oct 2018)

I'm pleased to be able to share work that Shostack + Associates and the Cyentia Institute have been doing for the Global Cyber Alliance. (16 Oct 2018)

I still have questions... (12 Oct 2018)

It's certainly not a silver bullet... (09 Oct 2018)

[no description provided] (04 Oct 2018)

[no description provided] (02 Oct 2018)