Learning Lessons from Incidents
[no description provided]
Shostack + Friends Blog
Recent Blog Posts, Page 43
Introducing Cyber Portfolio Management
[no description provided]
Calls for an NTSB?
[no description provided]
Groundrules on Complaining About Security
Everyone complains about security, but no one ever... sets boundaries
On Immigration and Refugees
[no description provided]
2017 and Tidal Forces
[no description provided]
Kyber Crystal and the Death Star
[no description provided]
The Dope Cycle and the Two Minutes Hate
[no description provided]
Modeling Attackers and Their Motives
There are a number of reports out recently, breathlessly presenting their analysis of one threatening group of baddies or another. Most readers should, at most, skim their analysis of the perpetrators. Read on for why.