Portfolio Thinking: AppSec Radar
[no description provided]
Shostack + Friends Blog
Gavle Goat Gallantly Guarded
[no description provided]
Learning from Near Misses
[no description provided]
The Carpenter Case
[no description provided]
45 Years
[no description provided]
Averting the Drift into Failure
[no description provided]
Vulnerabilities Equities Process and Threat Modeling
[no description provided]
Microsoft's PCI Blueprint
[no description provided]
The Fights We Have to Fight: Fixing Bugs
[no description provided]
Data Flow Diagrams 3.0
[no description provided]
Why is 'Reply' Not the Strongest Signal?
[no description provided]
Emergent Design Issues
[no description provided]
20 Year Software: Engineering and Updates
[no description provided]
Threat Modeling ‘App Democracy’
[no description provided]
Building an Application Security Team
[no description provided]