Measuring ROI for DMARC
I'm pleased to be able to share work that Shostack + Associates and the Cyentia Institute have been doing for the Global Cyber Alliance.
Shostack + Friends Blog
Recent Blog Posts, Page 35
GAO Report on Equifax
I still have questions...
Does PCI Matter?
It's certainly not a silver bullet...
The Architectural Mirror (Threat Model Thursday)
[no description provided]
CVE Funding and Process
[no description provided]
Space Elevator Test
Japan has launched a miniature space elevator.
Reflective Practice and Threat Modeling (Threat Model Thursday)
[no description provided]
Threat Model Thursday: Legible Architecture
[no description provided]
Toolbox: After a Conference
[no description provided]
Threat Modeling in 2018: Attacks, Impacts and Other Updates
The slides from my Blackhat talk are now available.
Aretha Franklin
[no description provided]
CyberSecurity Hall of Fame
[no description provided]
CSO on AppSec at the Speed of Devops
[no description provided]
Summer Reading List
[no description provided}
Threat Modeling Thursday: 2018
[no description provided]