After a Conference
Some tips on how to regoup and catch up after being away for conferences.
Shostack + Friends Blog
Spoofing In Depth
Adam @ RSA
Where and when to find Adam Shostack at RSA 2019
What Should Training Cover?
When suggesting that someone needs more training, consider what specific points should be covered.
Dolphins and Pufferfish
More chaos in nature
55 5 ⭐ Reviews?
Almost 5 years after release, I'm looking for a few more Amazon reviews.
Podcast: DevSecOps
I recently chatted with Mark Miller over at DevSecOps
The Queen of the Skies and Innovation
Innovation, regulation, and more.
Nature and Nurture in Threat Modeling
What comes easily should still be taught and elaborated upon.
Fire Doesn't Innovate by Kip Boyle (Book Review)
An unexpected book review.
Incentives and Multifactor Authentication
What if we gamified security?
Threat Modeling: Attackers May Adapt, Respond
Reasons for failure in real-world security
Threat Modeling as Code
Exploring threat models as code.
LinkedIn Learning: Producing a Video
My Linkedin Learning course is getting really strong positive feedback. Today, I want to peel back the cover a bit, and talk about how it came to be.
IriusRisk 2.0
I’m excited to be able to share “Announcement: IriusRisk Threat Modeling Platform 2.0 Released.”