EPISODE · Dec 15, 2021 · 31 MIN
Adam Shostack -- Fast, cheap and good threat models
from The Application Security Podcast · host Chris Romeo and Robert Hurlbut
Adam is a leading expert on threat modeling, and a consultant, expert witness, author and game designer. He has decades of experience delivering security. His experience ranges across the business world from founding startups to nearly a decade at Microsoft. While not consulting or training, Shostack serves as an advisor to a variety of companies and academic institutions. Adam joins us to talk about fast, cheap, and good threat models. We discuss how Adam defines these categories, the weight of threat modeling, questionnaires/requirements, expertise, and how to make threat modeling conversational. We hope you enjoy this conversation with... Adam Shostack. You're about to listen to AppSec Podcast.The Application Security Podcast is brought to you by Security Journey.About Security JourneyAdam Shostack is a leading expert on threat modeling and a consultant, expert witness, author, and game designer.→ Learn more about Security JourneyConnect with Adam Shostack:→ Shostack + Associates→ Adam ShostackMentioned in this episode:→ Shostack + Associates→ Adam Shostack→ Gary McGraw→ OWASP Application Security Verification Standard (ASVS)→ ATT&CK→ MITRE ATT&CK Framework→ Cyber Kill Chain (Lockheed Martin)Follow the Application Security Podcast:➜ Home➜ X➜ LinkedIn➜ YouTube➜ Instagram➜ FacebookChapters:00:00 Meet Adam Shostack: Fast, cheap and good threat models03:15 Yeah, I want to unpack these 3 words a little bit04:47 You're thinking cheap, are you thinking from a resources and time07:38 We keep talking about and using that term heavyweight. Is threat09:17 Yeah, one of the things that I've said since I first12:24 Yeah, I'm tracking with you now as well about the fact15:11 You mean the 3 questions that are being asked20:48 Oh, and I was thinking similar. I always think about requirements22:48 That— have you ever looked at like the ATT&CK methodology, for24:21 That makes sense. But let's talk about what do you need27:07 To kind of bring all these things together, Adam, we, all29:34 What's the call to action then that you would offer to
Embed this episode
What this episode covers
Adam is a leading expert on threat modeling, and a consultant, expert witness, author and game designer. He has decades of experience delivering security. His experience ranges across the business world from founding startups to nearly a decade at Microsoft. While not consulting or training, Shostack serves as an advisor to a variety of companies and academic institutions. Adam joins us to talk about fast, cheap, and good threat models. We discuss how Adam defines these categories, the weight...
Ready to play
Adam Shostack -- Fast, cheap and good threat models
No transcript for this episode yet
Similar Episodes
No similar episodes found.
Similar Podcasts
No similar podcasts found.