Is the industry's leading threat modeling and secure design solution in application security. Shostack is the author of 'Threat Modeling: Designing for Security' and the co-author of 'The New School of Information Security.' While at Microsoft, he drove the Autorun fix into Windows Update, was the lead designer of the SDL Threat Modeling Tool v3 and created the 'Elevation of Privilege' game. He currently helps organizations improve their security via Shostack and Associates and offers industry-leading threat modeling training. Shostack is a leading expert on threat modeling and has been on IriusRisk’s technical advisory board since its inception. He’s an active contributor to a number of OWASP projects and has helped FTSE 100 companies to build security into their development processes through threat modeling and integrated security testing. He practices security at every stage of the development life cycle by leading sessions on threat modeling, secure architecture and design, static/dynamic/component analysis, offensive research, and defensive programming techniques.ĭe Vries started his career as a C, C++ and Java developer before moving into software security. Springett educates teams on the strategy and specifics of developing secure software. The future of threat modeling for applications.Business benefits achieved through collaboration.In this video interview with Information Security Media Group, the panel discusses: Participating in this discussion are: Steve Springett, senior manager - product security, ServiceNow Stephen De Vries, co-founder and chief executive officer, IriusRisk and Adam Shostack, president, Shostack and Associates. Panelists from ServiceNow and IriusRisk discuss the road map. But threat modeling offers a new strategy to bring these teams together and achieve business benefits.

The cultural divide between application security and developer teams is well known. Steve Springett, senior manager - product security, ServiceNow Stephen De Vries, co-founder and chief executive officer, IriusRisk Adam Shostack, president, Shostack and Associates

Sdl threat modeling tool v3