Pivots and Payloads
A new game from SANS for understanding pen test methodology, tactics, and tools.
Shostack + Friends Blog
Recent Blog Posts, Page 33
Resources for Infosec Skillbuilding
The Threat Modeling Book has been featured on a list of resources by Digital Guardian.
House Oversight Committee on Equifax
The House Oversight Committee has released a scathing report on Equifax...
Structures, Engineering and Security
J.E. Gordon’s Structures, or Why Things Don’t Fall Down is a fascinating and accessible book. Why don’t things fall down? It turns out this is a simple question with some very deep answers.
Gavelblocken, 2018
The Gavle Goat is up.
Books which are worth your time: Q4
Some books worth reading.
Threat Modeling in 2018: Attacks, Impacts and Other Updates
Check out my talk from Blackhat 2018
Change in the Weather
Some recent changes in the weather...
Airline Safety
Airplanes are filthy...
Podcast with Ron Woerner
Another podcast, another chance to talk about Threat Modeling
Privacy Extension to Elevation of Privilege game
An extended version of Elevation of Privilege, now with Privacy.
Measuring ROI for DMARC
I'm pleased to be able to share work that Shostack + Associates and the Cyentia Institute have been doing for the Global Cyber Alliance.
GAO Report on Equifax
I still have questions...
Does PCI Matter?
It's certainly not a silver bullet...
The Architectural Mirror (Threat Model Thursday)
[no description provided]