Ideas That Shaped Modern Threat Modeling
Books provide an opportunity to explore the concepts, practices, and lessons that underpin effective security decision-making.
Through threat modeling, secure design, risk analysis, and security decision-making, Adam Shostack's books have helped practitioners around the world build practical approaches to understanding and improving security.
Whether you're looking for foundational techniques or broader perspectives on why security succeeds or fails, these works provide both guidance and insight drawn from decades of experience.
Threat Modeling: Designing for Security in an AI World will be available February 2, 2027. Help us get the word out!
For 2027, Adam has updated the definitive book on threat modeling for a new age of software development. The new edition updates the structured approach to add clarity and AI throughout.
Read More
Adam provides a fun and jargon-free introduction to crucial cybersecurity knowledge for everyone involved in the development of software and systems.
Read More
The age of security as pure technology is long past, and modern practitioners need to understand the social and cognitive aspects of security if they are to be successful. Shostack and Stewart teach readers exactly what they need to know--I just wish I could have had it when I first started out.
— David Mortman,
CSO-in-Residence Echelon One,
former CSO Siebel Systems