Threat modeling
by Adam Shostack · first published 2014
2mentions
1recommended by
2HN commenters
2017–2020first – last mentioned
50% recommend50% neutral
"Adam Shostack is responsible for security development lifecycle threat modeling at Microsoft and is one of a handful of threat modeling experts in the world. Now, he is sharing his considerable expertise into this unique book. With pages of specific actionable advice, he details how to build better security into the design of systems, software, or services from the outset. You'll explore various threat modeling approaches, find out how to test your designs against threats, and learn effective ways to address threats that have been validated at Microsoft and other top companies."--
Affiliate links. As an Amazon Associate I earn from qualifying purchases.
…were mentioned. Hacking Exposed 7 by Stuart McClure Countdown to Zero Day by Kim Zetter Ghost in the Wires by Kevin Mitnick Spam Nation by Brian Krebs Practical Malware Analysis by Michael Sikorski Threat Modeling by Adam Shostack Social Engineering by Christopher Hadnagy The Hacker Playbook 3 by Peter Kim The Practice of Network Security Monitoring by Richard Bejtlich Dark Territory by Fred Kaplan The Code…
on “Show HN: A compilation of cybersecurity book recommendations from 25 articles” ↗…ways to communicate Microsoft developed quite a few of these ideas internally with the TwC (Trustworthy Computing) initiative in the early 2000s, and built a protocol - and development workflow - around threat modeling and security awareness. Most of their internal security-oriented protocol is listed for free: https://www.microsoft.com/en-us/sdl/ As are some of their tools. For individual developers wanting to have…
on “The OWASP Top 10 is killing me” ↗