Threat Modeling and Understanding Inherent Threats - Adam Shostack - ESW #359

Enterprise Security Weekly (Video)

コンテンツは Security Weekly Productions によって提供されます。エピソード、グラフィック、ポッドキャストの説明を含むすべてのポッドキャストコンテンツは、Security Weekly Productions またはそのポッドキャストプラットフォームパートナーによって直接アップロードされ、提供されます。誰かがあなたの著作物をあなたの許可なく使用していると思われる場合は、ここで概説されているプロセスに従うことができますhttps://ja.player.fm/legal。

2M ago 44:34

MP4•エピソードのホーム

This is a great interview with Adam Shostack on all things threat modeling. He's often the first name that pops into people's heads when threat modeling comes up, and has created or been involved with much of the foundational material around the subject. Adam recently released a whitepaper that focuses on and defines inherent threats.

Resources:

Here's the Inherent Threats Whitepaper
Adam's book, Threat Modeling: Designing for Security
Adam's latest book, Threats: What Every Engineer Should Learn from Star Wars
We mention the Okta Breach - here's my writeup on it
We mention the CSRB report on the Microsoft/Storm breach, here's Adam's blog post on it
And finally, Adam mentions the British Library incident report, which is here, and Adam's blog post is here

Show Notes: https://securityweekly.com/esw-359

967 つのエピソード