Shostack + Associates

New strategic partnership 🎉 We are ecstatic to have partnered with Shostack + Associates to now offer coaching services to our enterprise customers, courtesy of 😷 Adam Shostack and his team. https://hubs.li/Q02STXfH0 #adamshostack #threatmodeling #threatmodelingtraining #threatmodelingcoaching

Thank you to Shostack + Associates for being one of the sponsors for todays #ThreatModCon 2024 San Fran. A very popular booth with all of the attendees 😃

Shostack + Associates is having a back to school sale. It's our biggest sale ever, with 25% off all our self-pace ("Computer based training") You can use code BTS-25-2024 to get access to Threat Modeling Intensive or Essentials. Links below.

I don’t loveeee posting on LinkedIn… But, I wanted to highlight the amazing work of some folks. Last weekend, I had the opportunity to attend BlackHat as a recipient of the student scholarship. To host such a huge event, thank you to all of the BlackHat staff, CAs, and venue administrators (Colton Gabertan I’m looking at you!). Not to mention, thank you to the BlackHat review board for this opportunity. I had a blast hearing from leaders in all sectors of cybersecurity in briefings, and I am incredibly grateful to speak to some living legends. I wanted to especially thank 😷 Adam Shostack and the fantastic folks at Shostack + Associates. Last year, I participated in Adam’s Threat Modeling Intensive as a student; this year, I had the chance to learn from an instructional perspective. After assisting in 2 separate sessions, I can confidently say that Adam is a treasure trove of lore for everything #threatmodeling and #appsec. Although both sessions consisted of a variety of professionals, Adam provided highly specific feedback and advice for implementation. By the end of the two-day training, Adam genuinely wants every participant to leave with the tools to create products that are secure by design. Although the phrase “all models are wrong, and some models are useful” lives in my brain rent-free after 36 hours of training (9 hours each day * 4 days ), I couldn’t have asked for a better experience. On-site, thank you to Erik Service, CISSP, CIPP and Scott Van Eps for the opportunity to learn from your technical expertise. Internally, thank you to Jessi Purdy and Mark Ramsden for providing smooth operations. Thank you so much for this opportunity, and I look forward to the next chance I get to attend BlackHat!

While at Blackhat this week, my schedule is packed with exciting events: - Delivering training sessions through Tuesday. - Book signing at the conference bookstore on Wednesday at 11 AM. - Introducing the talk "Is Defense Winning?" on Wednesday at 4:15 PM in Oceanside A, Level 2. My main focus areas include scaling threat modeling programs and aligning security with business objectives. If you're attending and want to connect, I'm keen to hear about the challenges you're facing in security engineering and threat modeling. Whether you want to chat at my book signing, catch me after the talk, or schedule a meeting, feel free to DM me to set up a time. I have slots available throughout the conference. Looking forward to engaging with you about your experiences and exploring how we can enhance threat modeling to meet your growing business demands. #BlackHatUSA #securebydesign #ThreatModeling #appsec