CSCP S02E24 - Adam Shostack - Threat Modelling past and future_mixdown

In this episode, Francesco and Adam Shostack discuss application security and threat modelling.
Adam is the author of Threat Modeling: Designing for Security. He helped create CVE
(Common Vulnerabilities and Exposure) and is on the review board for Black Hat. He
encourages coders and computer engineers to work smarter, not harder.

The podcast is brought to you by the generosity of NSC42 Ltd, your cybersecurity partner. Cybersecurity is a complex and different for every organization, and you need the best-tailored service to make sure your customer's data is safe and sound so that you can focus on what's important, focusing on your clients and bringing the best and safest experience. 

 

1:00 Introducing Adam Shostack
6:00 CVE (Common Vulnerabilities and Exposure)
9:46 Finding satisfaction in a job in security
15:00 Frameworks and static analysis
21:22 Threat Modeling
24:50 Work smarter, not harder
29:12 Documentation in DevOps
34:08 4 questions in Threat Modeling
41:32 Positive Message

Links
Adam Shostack
https://adam.shostack.org
Twitter @adamshostack
https://threatmodelingbook.com
https://www.blackhat.com

Cyber Security and Cloud Podcast
#CSCP
http://cybercloudpodcast.com
#cybermentoringmonday