corpus.blog
41554 blogs · [ { "id": "01a087e0-3153-70ea-a11e-284cfc848e74", "title": "Threat Model Thursday: BIML Machine Learning Risk Framework", "url": "https://shostack.org/blog/tmt-biml-machine-learning-risk-framework/", "published_at": "2020-02-27T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cfbe59fe8", "title": "Blackhat and Human Factors", "url": "https://shostack.org/blog/blackhat-and-human-factors-2020/", "published_at": "2020-02-26T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cfbb84337", "title": "Repudiation Now Live on Linkedin Learning", "url": "https://shostack.org/blog/repudiation-now-live-on-linkedin-learning/", "published_at": "2020-02-11T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cfad03fd0", "title": "Threat Model Thursday: Games", "url": "https://shostack.org/blog/tmt-games/", "published_at": "2020-02-06T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cfa93a4f1", "title": "Threat Model Thursday: Files", "url": "https://shostack.org/blog/tmt-files/", "published_at": "2020-01-23T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cfa4856fb", "title": "Cryptographic Excitement", "url": "https://shostack.org/blog/cryptographic-excitement/", "published_at": "2020-01-16T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cfa0e9386", "title": "Enter the SpudNet", "url": "https://shostack.org/blog/enter-the-spudnet/", "published_at": "2020-01-15T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cf9d5a619", "title": "100,00 Moon Shots", "url": "https://shostack.org/blog/10000-moon-shots/", "published_at": "2020-01-12T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cf9621923", "title": "Threat Modeling Thursday: The Human Element", "url": "https://shostack.org/blog/tmt-the-human-element/", "published_at": "2020-01-09T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cf8b88007", "title": "Threat Modeling Thursday: Machine Learning", "url": "https://shostack.org/blog/tmt-machine-learning/", "published_at": "2020-01-02T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cf88a8313", "title": "Echo, Threat Modeling and Privacy", "url": "https://shostack.org/blog/echo-threat-modeling-and-privacy/", "published_at": "2019-12-30T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cf7e07a1a", "title": "Star Wars Episode 9 is a week away!", "url": "https://shostack.org/blog/star-wars-episode9-week-away/", "published_at": "2019-12-13T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cf79fcca7", "title": "Encryption & Privacy Policy and Technology", "url": "https://shostack.org/blog/encryption-privacy-policy-and-technology/", "published_at": "2019-12-11T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cf6a598bc", "title": "Empirical Evaluation of Secure Development Processes", "url": "https://shostack.org/blog/empirical-evaluation-of-secure-development-processes/", "published_at": "2019-12-07T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cf5b1eee6", "title": "Goodbye, Feedburner", "url": "https://shostack.org/blog/goodbye-feedburner/", "published_at": "2019-12-03T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cf5a23c88", "title": "Books Worth Your Time (Q4)", "url": "https://shostack.org/blog/books-worth-your-time-q4/", "published_at": "2019-12-01T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cf54df1df", "title": "The Gavle Goat is up", "url": "https://shostack.org/blog/the-gavle-goat-is-up/", "published_at": "2019-11-30T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cf528308c", "title": "Han Solo, Frozen in Carbonite", "url": "https://shostack.org/blog/han-solo-frozen-in-carbonite/", "published_at": "2019-11-26T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cf4ff643a", "title": "Managed Attribution Threat Modeling", "url": "https://shostack.org/blog/managed-attribution-threat-modeling/", "published_at": "2019-11-14T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cf446ab9c", "title": "Message Sequence Charts", "url": "https://shostack.org/blog/message-sequence-charts/", "published_at": "2019-11-06T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cf37b13e7", "title": "Medical Device Security Standards", "url": "https://shostack.org/blog/medical-device-security-standards/", "published_at": "2019-11-02T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cf2e64d2e", "title": "Includes No Dirt: Healthcare Threat Modeling (Thursday)", "url": "https://shostack.org/blog/includes-no-dirt-healthcare-threat-modeling-thursday/", "published_at": "2019-10-31T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cf275e94f", "title": "Interesting Finds: Liberalism, machine learning, encryption and learning", "url": "https://shostack.org/blog/interesting-finds-liberalism-machine-learning-encryption/", "published_at": "2019-10-28T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cf1ec5864", "title": "Who Are We Kidding with Attacker-Centered Threat Modeling?", "url": "https://shostack.org/blog/who-are-we-kidding-with-attacker-centered-threat-modeling/", "published_at": "2019-10-23T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cf1d5574b", "title": "Interesting Reads: Risk, Automation, lessons and more!", "url": "https://shostack.org/blog/interesting-reads-2/", "published_at": "2019-10-15T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cf1d53170", "title": "Quick Threat Model Links October 2019", "url": "https://shostack.org/blog/quick-threat-modeling-links-october-2019/", "published_at": "2019-10-09T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cf1aab4e6", "title": "OWASP Portland: Talk and Podcast", "url": "https://shostack.org/blog/owasp-portland-talk-and-podcast/", "published_at": "2019-10-02T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cf19673cc", "title": "Interesting reads", "url": "https://shostack.org/blog/interesting-reads/", "published_at": "2019-09-18T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cf0f803ea", "title": "Capture the Flag events and eSports", "url": "https://shostack.org/blog/capture-the-flag-events-and-esports/", "published_at": "2019-09-11T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cf085dc7b", "title": "Course announcement: Tampering in Depth!", "url": "https://shostack.org/blog/course-announcement-tampering-in-depth/", "published_at": "2019-09-10T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cefd42528", "title": "Threat Modeling Building Blocks", "url": "https://shostack.org/blog/threat-modeling-building-blocks/", "published_at": "2019-09-04T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cef2b3d93", "title": "Interesting Reads, August 19", "url": "https://shostack.org/blog/interesting-reads-august-19/", "published_at": "2019-08-21T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cee3aa9b0", "title": "Training At Embedded Systems Security Days", "url": "https://shostack.org/blog/training-at-embedded-systems-security-days/", "published_at": "2019-08-15T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cede702a2", "title": "Toolbox: After a Conference", "url": "https://shostack.org/blog/toolbox-after-a-conference-2/", "published_at": "2019-08-13T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284ced7de3a8", "title": "Blackhat Best Practice", "url": "https://shostack.org/blog/blackhat-best-practice/", "published_at": "2019-08-02T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284ced354463", "title": "Actionable Followups from the Capital One Breach", "url": "https://shostack.org/blog/actionable-followups-from-the-capital-one-breach/", "published_at": "2019-07-30T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cec873ec2", "title": "Valuing CyberSecurity Research Datasets", "url": "https://shostack.org/blog/valuing-cybersecurity-research-datasets/", "published_at": "2019-07-26T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cec06151a", "title": "Happy Apollo Day!", "url": "https://shostack.org/blog/happy-apollo-day/", "published_at": "2019-07-20T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cebb4358a", "title": "Books Worth Reading: Q2 2019 (Apollo Edition)", "url": "https://shostack.org/blog/books-worth-reading-q2-2019-apollo-edition/", "published_at": "2019-07-15T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284ceb299f42", "title": "Threat Modeling at Layer 8", "url": "https://shostack.org/blog/threat-modeling-at-layer-8/", "published_at": "2019-07-12T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cea372930", "title": "NIST on SDLs", "url": "https://shostack.org/blog/nist-on-sdls/", "published_at": "2019-07-11T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284ce9fa766a", "title": "Safety and Security in Automated Driving", "url": "https://shostack.org/blog/safety-and-security-in-automated-driving/", "published_at": "2019-07-08T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284ce9dd5da1", "title": "The Road to Mediocrity", "url": "https://shostack.org/blog/the-road-to-mediocrity/", "published_at": "2019-07-05T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284ce8dcf84c", "title": "The Unanimous Declaration of the 13 United States", "url": "https://shostack.org/blog/the-unanimous-declaration-of-the-13-united-states/", "published_at": "2019-07-04T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284ce91f07a0", "title": "The Unanimous Declaration of the Thirteen United States of America", "url": "https://shostack.org/blog/the-unanimous-declaration-of-the-thirteen-united-states-of-america-3/", "published_at": "2019-07-04T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284ce884dbec", "title": "Passwords Advice", "url": "https://shostack.org/blog/passwords-advice/", "published_at": "2019-06-26T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284ce8821648", "title": "Happy Juneteenth!", "url": "https://shostack.org/blog/happy-juneteenth-3/", "published_at": "2019-06-19T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284ce82f3a4c", "title": "DNS Security", "url": "https://shostack.org/blog/dns-security/", "published_at": "2019-06-13T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284ce7af3342", "title": "When security goes off the rails", "url": "https://shostack.org/blog/when-security-goes-off-the-rails/", "published_at": "2019-06-07T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284ce6f7c770", "title": "Polymorphic Warnings On My Mind", "url": "https://shostack.org/blog/polymorphic-warnings-on-my-mind/", "published_at": "2019-05-29T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284ce62b0a24", "title": "Promoting Threat Modeling Work", "url": "https://shostack.org/blog/promoting-threat-modeling-work/", "published_at": "2019-05-13T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284ce53a54be", "title": "Testing Building Blocks", "url": "https://shostack.org/blog/testing-building-blocks/", "published_at": "2019-05-07T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284ce4564d17", "title": "Episode 9 Spoilers", "url": "https://shostack.org/blog/episode-9-spoilers/", "published_at": "2019-05-04T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284ce3e543c1", "title": "3 Arguments for Threat Modeling", "url": "https://shostack.org/blog/3-arguments-for-threat-modeling/", "published_at": "2019-04-24T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284ce38fa91b", "title": "The White Box Essays (Book Review)", "url": "https://shostack.org/blog/the-white-box-essays/", "published_at": "2019-04-10T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284ce2bf28cc", "title": "Science of Security, Science for Security", "url": "https://shostack.org/blog/science-of-security-science-for-security/", "published_at": "2019-04-09T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284ce1ea876b", "title": "‘No Need’ to tell the public (?!?)", "url": "https://shostack.org/blog/no-need-to-tell-the-public/", "published_at": "2019-04-08T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284ce1b555db", "title": "Hayabusa!", "url": "https://shostack.org/blog/hayabusa/", "published_at": "2019-04-06T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284ce16fe76a", "title": "Books Worth Your Time (Q1 2019)", "url": "https://shostack.org/blog/books-worth-your-time-q1-2019/", "published_at": "2019-04-05T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284ce09779f4", "title": "Leave Those Numbers for April 1st", "url": "https://shostack.org/blog/leave-those-numbers-for-april-1st/", "published_at": "2019-04-02T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cdfe87aac", "title": "20 Years of STRIDE: Looking Back, Looking Forward", "url": "https://shostack.org/blog/20-years-of-stride-looking-back-looking-forward/", "published_at": "2019-04-01T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cdf87af3c", "title": "Cybersecurity is not very important", "url": "https://shostack.org/blog/cybersecurity-is-not-very-important/", "published_at": "2019-03-22T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cdf8644ac", "title": "Threat Modeling in 2019", "url": "https://shostack.org/blog/threat-modeling-in-2019/", "published_at": "2019-03-19T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cde9c423e", "title": "India's Intermediary Guidelines", "url": "https://shostack.org/blog/indias-intermediary-guidelines/", "published_at": "2019-03-18T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cddf6e3fe", "title": "Happy Pi Day!", "url": "https://shostack.org/blog/happy-pi-day-2019/", "published_at": "2019-03-14T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cdda41c6f", "title": "A Seat At The Table (AppSecCali)", "url": "https://shostack.org/blog/a-seat-at-the-table-appseccali/", "published_at": "2019-03-13T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cdd001949", "title": "After a Conference", "url": "https://shostack.org/blog/after-a-conference/", "published_at": "2019-03-11T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cdd7486dd", "title": "Facebook's Privacy Constitution", "url": "https://shostack.org/blog/facebooks-privacy-constitution/", "published_at": "2019-03-11T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cdc0d7d1d", "title": "Adam @ RSA", "url": "https://shostack.org/blog/adam-at-rsa/", "published_at": "2019-02-28T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cdc80fadb", "title": "Spoofing In Depth", "url": "https://shostack.org/blog/spoofing-in-depth/", "published_at": "2019-02-28T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cdbd26ccd", "title": "What Should Training Cover?", "url": "https://shostack.org/blog/what-should-training-cover/", "published_at": "2019-02-24T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cdb68c793", "title": "Dolphins and Pufferfish", "url": "https://shostack.org/blog/dolphins-and-pufferfish/", "published_at": "2019-02-16T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cda8c5335", "title": "55 5 ⭐ Reviews?", "url": "https://shostack.org/blog/fifty-five-5star-reviews/", "published_at": "2019-02-14T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cda8554c4", "title": "Podcast: DevSecOps", "url": "https://shostack.org/blog/podcast-devsecops/", "published_at": "2019-02-13T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cd9b0c427", "title": "The Queen of the Skies and Innovation", "url": "https://shostack.org/blog/the-queen-of-the-skies-and-innovation/", "published_at": "2019-02-10T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cd93862eb", "title": "Nature and Nurture in Threat Modeling", "url": "https://shostack.org/blog/nature-and-nurture-in-threat-modeling/", "published_at": "2019-02-06T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cd92c6f73", "title": "Fire Doesn't Innovate by Kip Boyle (Book Review)", "url": "https://shostack.org/blog/fire-doesnt-innovate-by-kip-boyle-book-review/", "published_at": "2019-02-04T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cd901c42e", "title": "Incentives and Multifactor Authentication", "url": "https://shostack.org/blog/incentives-and-multifactor-authentication/", "published_at": "2019-02-01T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cd8471f0c", "title": "Threat Modeling: Attackers May Adapt, Respond", "url": "https://shostack.org/blog/threat-modeling-attackers-may-adapt-respond/", "published_at": "2019-01-31T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cd83aa99c", "title": "Threat Modeling as Code", "url": "https://shostack.org/blog/threat-modeling-as-code/", "published_at": "2019-01-23T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cd712ef71", "title": "IriusRisk 2.0", "url": "https://shostack.org/blog/iriusrisk-2-0/", "published_at": "2019-01-10T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cd76dbb5a", "title": "LinkedIn Learning: Producing a Video", "url": "https://shostack.org/blog/linkedin-learning-producing-a-video/", "published_at": "2019-01-10T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cd707241e", "title": "Scaling Threat Modeling Training", "url": "https://shostack.org/blog/scaling-threat-modeling-training/", "published_at": "2019-01-02T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cd61c2f27", "title": "Beyond Elf on a Shelf", "url": "https://shostack.org/blog/beyond-elf-on-a-shelf/", "published_at": "2018-12-24T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cd5b529f5", "title": "High ROI Security Advisory Boards", "url": "https://shostack.org/blog/high-roi-security-advisory-boards/", "published_at": "2018-12-21T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cd5897dbd", "title": "Pivots and Payloads", "url": "https://shostack.org/blog/pivots-and-payloads/", "published_at": "2018-12-17T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cd567dd66", "title": "Resources for Infosec Skillbuilding", "url": "https://shostack.org/blog/resources-for-infosec-skillbuilding/", "published_at": "2018-12-12T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cd4fe8f34", "title": "House Oversight Committee on Equifax", "url": "https://shostack.org/blog/house-oversight-committee-on-equifax/", "published_at": "2018-12-11T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cd4a866c0", "title": "Structures, Engineering and Security", "url": "https://shostack.org/blog/structures-engineering-and-security/", "published_at": "2018-12-07T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cd49930ea", "title": "Gavelblocken, 2018", "url": "https://shostack.org/blog/gavelblocken-2018/", "published_at": "2018-11-29T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cd3a21e5f", "title": "Books which are worth your time: Q4", "url": "https://shostack.org/blog/books-worth-your-time-q4-2018/", "published_at": "2018-11-26T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cd2fa216b", "title": "Threat Modeling in 2018: Attacks, Impacts and Other Updates", "url": "https://shostack.org/blog/threat-modeling-in-2018-video-release/", "published_at": "2018-11-15T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cd2e73f21", "title": "Change in the Weather", "url": "https://shostack.org/blog/change-in-the-weather/", "published_at": "2018-11-09T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cd229f3e1", "title": "Airline Safety", "url": "https://shostack.org/blog/airline-safety/", "published_at": "2018-11-01T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cd1baf18e", "title": "Podcast with Ron Woerner", "url": "https://shostack.org/blog/podcast-with-ron-woerner/", "published_at": "2018-10-29T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cd1782b1b", "title": "Privacy Extension to Elevation of Privilege game", "url": "https://shostack.org/blog/privacy-extension-to-elevation-of-privilege-game/", "published_at": "2018-10-17T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cd0ea8c8b", "title": "Measuring ROI for DMARC", "url": "https://shostack.org/blog/measuring-roi-for-dmarc/", "published_at": "2018-10-16T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cd0c9019f", "title": "GAO Report on Equifax", "url": "https://shostack.org/blog/gao-report-on-equifax/", "published_at": "2018-10-12T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cd0c3eb67", "title": "Does PCI Matter?", "url": "https://shostack.org/blog/does-pci-matter/", "published_at": "2018-10-09T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cd00fc503", "title": "The Architectural Mirror (Threat Model Thursday)", "url": "https://shostack.org/blog/tmt-the-architectural-mirror/", "published_at": "2018-10-04T00:00:00+00:00" } ] posts Claim your blog
Back to shostack.org
Blog · corpus.blog/blogs/shostack.org/posts

shostack.org

shostack.org

2020

Threat Model Thursday: BIML Machine Learning Risk Frameworkoriginal ↗
27 Feb 2020
Blackhat and Human Factorsoriginal ↗
26 Feb 2020
Repudiation Now Live on Linkedin Learningoriginal ↗
11 Feb 2020
Threat Model Thursday: Gamesoriginal ↗
6 Feb 2020
Threat Model Thursday: Filesoriginal ↗
23 Jan 2020
Cryptographic Excitementoriginal ↗
16 Jan 2020
Enter the SpudNetoriginal ↗
15 Jan 2020
100,00 Moon Shotsoriginal ↗
12 Jan 2020
Threat Modeling Thursday: The Human Elementoriginal ↗
9 Jan 2020
Threat Modeling Thursday: Machine Learningoriginal ↗
2 Jan 2020

2019

Echo, Threat Modeling and Privacyoriginal ↗
30 Dec 2019
Star Wars Episode 9 is a week away!original ↗
13 Dec 2019
Encryption & Privacy Policy and Technologyoriginal ↗
11 Dec 2019
Empirical Evaluation of Secure Development Processesoriginal ↗
7 Dec 2019
Goodbye, Feedburneroriginal ↗
3 Dec 2019
Books Worth Your Time (Q4)original ↗
1 Dec 2019
The Gavle Goat is uporiginal ↗
30 Nov 2019
Han Solo, Frozen in Carboniteoriginal ↗
26 Nov 2019
Managed Attribution Threat Modelingoriginal ↗
14 Nov 2019
Message Sequence Chartsoriginal ↗
6 Nov 2019
Medical Device Security Standardsoriginal ↗
2 Nov 2019
Includes No Dirt: Healthcare Threat Modeling (Thursday)original ↗
31 Oct 2019
Interesting Finds: Liberalism, machine learning, encryption and learningoriginal ↗
28 Oct 2019
Who Are We Kidding with Attacker-Centered Threat Modeling?original ↗
23 Oct 2019
Interesting Reads: Risk, Automation, lessons and more!original ↗
15 Oct 2019
Quick Threat Model Links October 2019original ↗
9 Oct 2019
OWASP Portland: Talk and Podcastoriginal ↗
2 Oct 2019
Interesting readsoriginal ↗
18 Sept 2019
Capture the Flag events and eSportsoriginal ↗
11 Sept 2019
Course announcement: Tampering in Depth!original ↗
10 Sept 2019
Threat Modeling Building Blocksoriginal ↗
4 Sept 2019
Interesting Reads, August 19original ↗
21 Aug 2019
Training At Embedded Systems Security Daysoriginal ↗
15 Aug 2019
Toolbox: After a Conferenceoriginal ↗
13 Aug 2019
Blackhat Best Practiceoriginal ↗
2 Aug 2019
Actionable Followups from the Capital One Breachoriginal ↗
30 Jul 2019
Valuing CyberSecurity Research Datasetsoriginal ↗
26 Jul 2019
Happy Apollo Day!original ↗
20 Jul 2019
Books Worth Reading: Q2 2019 (Apollo Edition)original ↗
15 Jul 2019
Threat Modeling at Layer 8original ↗
12 Jul 2019
NIST on SDLsoriginal ↗
11 Jul 2019
Safety and Security in Automated Drivingoriginal ↗
8 Jul 2019
The Road to Mediocrityoriginal ↗
5 Jul 2019
The Unanimous Declaration of the 13 United Statesoriginal ↗
4 Jul 2019
The Unanimous Declaration of the Thirteen United States of Americaoriginal ↗
4 Jul 2019
Passwords Adviceoriginal ↗
26 Jun 2019
Happy Juneteenth!original ↗
19 Jun 2019
DNS Securityoriginal ↗
13 Jun 2019
When security goes off the railsoriginal ↗
7 Jun 2019
Polymorphic Warnings On My Mindoriginal ↗
29 May 2019
Promoting Threat Modeling Workoriginal ↗
13 May 2019
Testing Building Blocksoriginal ↗
7 May 2019
Episode 9 Spoilersoriginal ↗
4 May 2019
3 Arguments for Threat Modelingoriginal ↗
24 Apr 2019
The White Box Essays (Book Review)original ↗
10 Apr 2019
Science of Security, Science for Securityoriginal ↗
9 Apr 2019
‘No Need’ to tell the public (?!?)original ↗
8 Apr 2019
Hayabusa!original ↗
6 Apr 2019
Books Worth Your Time (Q1 2019)original ↗
5 Apr 2019
Leave Those Numbers for April 1storiginal ↗
2 Apr 2019
20 Years of STRIDE: Looking Back, Looking Forwardoriginal ↗
1 Apr 2019
Cybersecurity is not very importantoriginal ↗
22 Mar 2019
Threat Modeling in 2019original ↗
19 Mar 2019
India's Intermediary Guidelinesoriginal ↗
18 Mar 2019
Happy Pi Day!original ↗
14 Mar 2019
A Seat At The Table (AppSecCali)original ↗
13 Mar 2019
After a Conferenceoriginal ↗
11 Mar 2019
Facebook's Privacy Constitutionoriginal ↗
11 Mar 2019
Adam @ RSAoriginal ↗
28 Feb 2019
Spoofing In Depthoriginal ↗
28 Feb 2019
What Should Training Cover?original ↗
24 Feb 2019
Dolphins and Pufferfishoriginal ↗
16 Feb 2019
55 5 ⭐ Reviews?original ↗
14 Feb 2019
Podcast: DevSecOpsoriginal ↗
13 Feb 2019
The Queen of the Skies and Innovationoriginal ↗
10 Feb 2019
Nature and Nurture in Threat Modelingoriginal ↗
6 Feb 2019
Fire Doesn't Innovate by Kip Boyle (Book Review)original ↗
4 Feb 2019
Incentives and Multifactor Authenticationoriginal ↗
1 Feb 2019
Threat Modeling: Attackers May Adapt, Respondoriginal ↗
31 Jan 2019
Threat Modeling as Codeoriginal ↗
23 Jan 2019
IriusRisk 2.0original ↗
10 Jan 2019
LinkedIn Learning: Producing a Videooriginal ↗
10 Jan 2019
Scaling Threat Modeling Trainingoriginal ↗
2 Jan 2019

2018

Beyond Elf on a Shelforiginal ↗
24 Dec 2018
High ROI Security Advisory Boardsoriginal ↗
21 Dec 2018
Pivots and Payloadsoriginal ↗
17 Dec 2018
Resources for Infosec Skillbuildingoriginal ↗
12 Dec 2018
House Oversight Committee on Equifaxoriginal ↗
11 Dec 2018
Structures, Engineering and Securityoriginal ↗
7 Dec 2018
Gavelblocken, 2018original ↗
29 Nov 2018
Books which are worth your time: Q4original ↗
26 Nov 2018
Threat Modeling in 2018: Attacks, Impacts and Other Updatesoriginal ↗
15 Nov 2018
Change in the Weatheroriginal ↗
9 Nov 2018
Airline Safetyoriginal ↗
1 Nov 2018
Podcast with Ron Woerneroriginal ↗
29 Oct 2018
Privacy Extension to Elevation of Privilege gameoriginal ↗
17 Oct 2018
Measuring ROI for DMARCoriginal ↗
16 Oct 2018
GAO Report on Equifaxoriginal ↗
12 Oct 2018
Does PCI Matter?original ↗
9 Oct 2018
The Architectural Mirror (Threat Model Thursday)original ↗
4 Oct 2018
Previous Next