Personal Information
Organization / Workplace
Greater Seattle Area United States
Occupation
leading expert on threat modeling, and a consultant, entrepreneur, technologist, author and game designer.
Industry
Technology / Software / Internet
Website
threatmodelingbook.com
About
Adam is a leading expert on threat modeling, and a consultant, entrepreneur, technologist, author and game designer. He's a member of the BlackHat Review Board, and helped create the CVE and many other things. He currently helps many organizations improve their security via Shostack & Associates, and helps startups become great businesses as an advisor and mentor. While at Microsoft, he drove the Autorun fix into Windows Update, was the lead designer of the SDL Threat Modeling Tool v3 and created the "Elevation of Privilege" game. Adam is the author of Threat Modeling: Designing for Security, and the co-author of The New School of Information Security.
Tags
cybersecurity
threat modeling
software development
engineering
star wars
security
csrb
liability
owasp
appsecpnw
investigations
agile software development
appsec
machine learning
agile
covid
stride
secure by design
sdl
See more
Presentations
(4)Personal Information
Organization / Workplace
Greater Seattle Area United States
Occupation
leading expert on threat modeling, and a consultant, entrepreneur, technologist, author and game designer.
Industry
Technology / Software / Internet
Website
threatmodelingbook.com
About
Adam is a leading expert on threat modeling, and a consultant, entrepreneur, technologist, author and game designer. He's a member of the BlackHat Review Board, and helped create the CVE and many other things. He currently helps many organizations improve their security via Shostack & Associates, and helps startups become great businesses as an advisor and mentor. While at Microsoft, he drove the Autorun fix into Windows Update, was the lead designer of the SDL Threat Modeling Tool v3 and created the "Elevation of Privilege" game. Adam is the author of Threat Modeling: Designing for Security, and the co-author of The New School of Information Security.
Tags
cybersecurity
threat modeling
software development
engineering
star wars
security
csrb
liability
owasp
appsecpnw
investigations
agile software development
appsec
machine learning
agile
covid
stride
secure by design
sdl
See more