Shostack + Friends Blog

 

Threats: The Table of Contents

Like the Force, each threat has a light side, and a dark side.

Let me share the table of contents for Threats. Each chapter is devoted to a threat. And like the Force, each threat has a light side and a dark side. For example, the book opens with Spoofing and Authenticity. But unlike the Force, we don't hope for balance. We hope to understand the threat, because that's the best way to anticipate and address the threat, and bring peace to the galaxy. (Or so we hope.)

1. Spoofing and Authenticity; 2. Tampering and Integrity; 3. Repudiation and Proof; 4. Information Disclosure and Confidentiality; 5. Denial of Service and Availability; 6. Expansion of Authority and Isolation; 7. Predictability and Randomness; 8. Parsing and Corruption; 9. Kill Chains

I'm excited that we have a simple table of contents that works as a quick guide to the book. It's common for technical books to have complex detailed tables of contents, but here, each chapter is structured the same:

  • The threat
  • Mechanisms
  • Specific scearios or technologies
  • Defenses

Many trees could have died to bring you that information. (There's also a bibliography and two indexes, because like the Force... no, that's not it. But there really is a second index, which I'll reveal soon.)

Threats: What Every Engineer Should Learn From Star Wars will be available January 25th wherever fine books are sold. You can pre-order on Amazon, Ada's Technical Books (my local technical bookstore), or bookshop.org.

Originally published by Adam on 16 Jan 2023
Categories:   books   security   threat modeling   Threats book