Blogs about: Threat Modeling
Featured Blog
Interesting Stats: B2B Threats
From Dark Reading's "Inside Out: Protecting your Partnerships--and Your Data… more →
Tom Olzak on Security
Microsoft Security Sites
wrote 1 month ago: ESP: Nadie puede negar el esfuerzo que dedica Microsoft a la seguridad aunque haya gente que no lo a … more →
Interesting Stats: B2B Threats
wrote 3 months ago: From Dark Reading's "Inside Out: Protecting your Partnerships--and Your Data … more →
Pragmatic Threat Modeling
wrote 3 months ago: Lately I have been doing training around the Microsoft prescribed threat modeling practice. Today, … more →
Blame the auditors: What a concept!
— 1 comment
wrote 4 months ago: I have never thought of this. After a breach, just blame the auditors. Wait. The reason I hadn’t … more →
AVSIM: Real world example of the value of offsite backups
wrote 7 months ago: The owners of AVSIM, an important resource for Microsoft Flight Simulator users, worked for 13 years … more →
Wobbly Security Frameworks are Often Fixed by Turning a Few Screws
— 1 comment
wrote 7 months ago: As security management becomes more integrated into business processes, it’s commonly seen as closel … more →
Fear, Trust, and Desire: Fertile ground for social engineers
— 1 comment
wrote 8 months ago: According to the recently released Microsoft Security Intelligence Report (2H2008), social engineeri … more →
Conficker: Unpreparedness was the problem, not the messenger
— 4 comments
wrote 9 months ago: As usual, finger-pointing about what is beginning to be seen as Conficker FUD is increasing. Unders … more →
Compliance requires people supported technical solutions
wrote 9 months ago: Although I agree that reliance on human behavior is not a good way to ensure information security po … more →
You Just Have to Run Faster than the Bear
wrote 9 months ago: For years, large businesses have spent millions to improve information security. Much of this expen … more →
Browsers are not security controls
wrote 9 months ago: Major Internet browsers were shown to be hackable this week at CanSecWest. This isn’t really … more →
Is Comcast Pulling Wool?
wrote 9 months ago: Reports of data breaches aren’t uncommon. And explanations are typically slow in coming, but … more →
Risk Mitigation Drives Breach Prevention Costs
— 1 comment
wrote 9 months ago: What do you tell your boss when you try to get additional—or any—breach control dollars into the IS … more →
What is Threat Modeling?
wrote 10 months ago: What is Threat Modeling? Threat modeling is an engineering technique you can use to help you identif … more →
CISG Team Blog
— 2 comments
wrote 1 year ago: The CISG Team Blog is now operational. We are initially blogging about things we are doing with Anti … more →
Application Security Development Lifecycle 5A: Is Threat Modeling Right For You?
— 1 comment
wrote 1 year ago: Several enterprises are increasingly investing time and money in building application security tasks … more →
Raffaele Rialdi on Threat Modelling
wrote 1 year ago: There is a nice video on the Virtual TechEd site here of RR, a Security Developer MVP. Raffaele Rial … more →
Locks Are to Keep the Honest People Out
— 1 comment
wrote 1 year ago: The latest DevCares, from my perspective, was an appropriate deep dive after Tuesday’s MSDN Ev … more →
Reducing the Cost of Software Regression
wrote 1 year ago: A widely held notion among computer scientists is that 80% of a programmer’s time is occupied … more →
