Shostack + Friends Blog

Recent Blog Posts, Page 39

Threat Modeling Tooling from 2017

[no description provided] (28 Dec 2017)

 

Portfolio Thinking: AppSec Radar

[no description provided] (27 Dec 2017)

 

Gavle Goat Gallantly Guarded

[no description provided] (08 Dec 2017)

 

Learning from Near Misses

[no description provided] (04 Dec 2017)

 

The Carpenter Case

[no description provided] (28 Nov 2017)

 

45 Years

[no description provided] (25 Nov 2017)

 

Averting the Drift into Failure

[no description provided] (22 Nov 2017)

 

Vulnerabilities Equities Process and Threat Modeling

[no description provided] (20 Nov 2017)

 

Microsoft's PCI Blueprint

[no description provided] (14 Nov 2017)

 

The Fights We Have to Fight: Fixing Bugs

[no description provided] (08 Nov 2017)

 

Data Flow Diagrams 3.0

[no description provided] (05 Nov 2017)

 

Why is 'Reply' Not the Strongest Signal?

[no description provided] (02 Nov 2017)

 

Emergent Design Issues

[no description provided] (29 Oct 2017)

 

20 Year Software: Engineering and Updates

[no description provided] (23 Oct 2017)

 

Threat Modeling ‘App Democracy’

[no description provided] (20 Oct 2017)