Threats

About the Authors

Adam Shostack is a leading expert on threat modeling. He’s also a   consultant, expert witness, and game designer. He has decades of experience delivering secure products and systems. His experience ranges across the business world from founding startups to nearly a decade at Microsoft.

His accomplishments include:

• Helped create the CVE; now an emeritus member of the Advisory Board
• Fixed Autorun for Windows XP and Vista
• Led the design and delivery of the Microsoft SDL Threat Modeling Tool (v3)
• Created the Elevation of Privilege threat modeling game and helped create Control-Alt-Hack
• Wrote Threat Modeling: Designing for Security, and coauthored The New School of Information Security

Beyond consulting and training, Shostack serves as an advisor to many companies and academic institutions. He is an Affiliate Professor at the Paul G. Allen School of Computer Science and Engineering at the University of Washington.

You can learn more at shostack.org.