Blogs about: Threat Modeling
Featured Blog
AVSIM: Real world example of the value of offsite backups
The owners of AVSIM, an important resource for Microsoft Flight Simulator users, worked for 13 years to build a well respected site. Using two servers, they conscientiously backed up one to the other… more →
Tom Olzak on Security
AVSIM: Real world example of the value of offsite backups
Tom Olzak wrote 1 month ago: The owners of AVSIM, an important resource for Microsoft Flight Simulator users, worked for 13 years … more →
Wobbly Security Frameworks are Often Fixed by Turning a Few Screws
— 1 comment
Tom Olzak wrote 1 month ago: As security management becomes more integrated into business processes, it’s commonly seen as closel … more →
Fear, Trust, and Desire: Fertile ground for social engineers
— 1 comment
Tom Olzak wrote 2 months ago: According to the recently released Microsoft Security Intelligence Report (2H2008), social engineeri … more →
Conficker: Unpreparedness was the problem, not the messenger
— 4 comments
Tom Olzak wrote 3 months ago: As usual, finger-pointing about what is beginning to be seen as Conficker FUD is increasing. Unders … more →
Compliance requires people supported technical solutions
Tom Olzak wrote 3 months ago: Although I agree that reliance on human behavior is not a good way to ensure information security po … more →
You Just Have to Run Faster than the Bear
Tom Olzak wrote 3 months ago: For years, large businesses have spent millions to improve information security. Much of this expen … more →
Browsers are not security controls
Tom Olzak wrote 3 months ago: Major Internet browsers were shown to be hackable this week at CanSecWest. This isn’t really … more →
Is Comcast Pulling Wool?
Tom Olzak wrote 3 months ago: Reports of data breaches aren’t uncommon. And explanations are typically slow in coming, but … more →
Risk Mitigation Drives Breach Prevention Costs
— 1 comment
Tom Olzak wrote 3 months ago: What do you tell your boss when you try to get additional—or any—breach control dollars into the IS … more →
What is Threat Modeling?
Vinod wrote 4 months ago: What is Threat Modeling? Threat modeling is an engineering technique you can use to help you identi … more →
CISG Team Blog
— 2 comments
mcurphey wrote 10 months ago: The CISG Team Blog is now operational. We are initially blogging about things we are doing with Anti … more →
Application Security Development Lifecycle 5A: Is Threat Modeling Right For You?
— 1 comment
akshay aggarwal wrote 1 year ago: Several enterprises are increasingly investing time and money in building application security tasks … more →
Raffaele Rialdi on Threat Modelling
mcurphey wrote 1 year ago: There is a nice video on the Virtual TechEd site here of RR, a Security Developer MVP. Raffaele Ria … more →
Locks Are to Keep the Honest People Out
— 1 comment
Andy wrote 1 year ago: The latest DevCares, from my perspective, was an appropriate deep dive after Tuesday’s MSDN E … more →
Reducing the Cost of Software Regression
Derek Callaway wrote 1 year ago: A widely held notion among computer scientists is that 80% of a programmer’s time is occupied … more →
Generating a Security Code Review Checklist in Outlook 2007
— 2 comments
mcurphey wrote 1 year ago: My colleague and legendary Hummus eater Alik Levin (that’s my plate at lunchtime today but rum … more →
From the Office of "Real World Software Security"
— 16 comments
mcurphey wrote 1 year ago: When a customer development team was recently asked to use the AntiXSS library, validate input and e … more →
Security Policies in the Application Development Process
mcurphey wrote 1 year ago: New article from John Steer on my team Security Policies in the Application Development Process … more →
IEEE Threat Modelling
— 3 comments
mcurphey wrote 1 year ago: This paper from IEEE describes how Ford Motor Company use the Threat and Application Modelling tool … more →
Have your say. Start a blog.
See our free features →
An 
Thingamajig
