NIST on SDLs
Mitigating the Risk of Software Vulnerabilities by Adopting a Secure Software Development Framework (SSDF) from NIST is open for comment.
Shostack + Friends Blog
Recent Blog Posts, Page 30
Safety and Security in Automated Driving
Let’s explore the risks associated with Automated Driving.
The Road to Mediocrity
The road to mediocre writing is paved with over-simplification and distraction.
The Unanimous Declaration of the Thirteen United States of America
When was the last time you looked over what our country was founded upon?
The Unanimous Declaration of the 13 United States
When was the last time you looked over what our country was founded upon?
Passwords Advice
Bruse Marshall has put together a useful comparison of password requirements from OWASP ASVS v3 and v4.
Happy Juneteenth!
Juneteenth is the celebration of the end of slavery in the US. We should have more holidays that celebrate freedom for the sake of freedom.
DNS Security
I'm happy to say that some new research by Jay Jacobs, Wade Baker, and myself is now available, thanks to the Global Cyber Alliance.
When security goes off the rails
My newest post over at Dark Reading ponders regulation.
Polymorphic Warnings On My Mind
The more we see it, the more we ignore it.
Promoting Threat Modeling Work
Some thoughts on promoting others’ threat modeling work.
Testing Building Blocks
There are a couple of new, short (4-page), interesting papers from a team at KU Leuven discussin the building blocks of threat modeling.
Episode 9 Spoilers
Today is the last Star Wars Day before Episode 9 comes out, and brings the Skywalker saga to its end.
3 Arguments for Threat Modeling
Top 3, from Continuum
The White Box Essays (Book Review)
A resource for those developing games.