Shostack + Friends Blog

Recent Blog Posts, Page 37

Threat Model Thursday: Talking, Dialogue and Review

As we head into RSA, I want to hold the technical TM Thursday post, and talk about how we talk to others in our organizations about particular threat models, and how we frame those conversations. (12 Apr 2018)

 

Security Engineering: Computers versus Bridges

[no description provided] (11 Apr 2018)

 

Gartner on DevSecOps Toolchain

[no description provided] (10 Apr 2018)

 

Threat Model Thursday: ARM's Network Camera TMSA

[no description provided] (05 Apr 2018)

 

John Harrison's Struggle Continues

[no description provided] (03 Apr 2018)

 

Reasonable Software Security Engineering Podcast

[no description provided] (02 Apr 2018)

 

Blaming the User

[no description provided] (30 Mar 2018)

 

Threat Model Thursday: ARM Yourselves!

[no description provided] (29 Mar 2018)

 

Ries on Gatekeepers

[no description provided] (27 Mar 2018)

 

Friday Star Wars: Trek and CISSP

[no description provided] (23 Mar 2018)

 

Threat Model Thursday: Synopsys

[no description provided] (22 Mar 2018)

 

Threat Modeling Panel at APPSEC Cali 2018

[no description provided] (20 Mar 2018)

 

Speculative Execution Threat Model

[no description provided] (15 Mar 2018)

 

Citizen Threat Modeling and more data

[no description provided] (14 Mar 2018)

 

Threat Modeling: Citizens Versus Systems

[no description provided] (08 Mar 2018)