Failure Modes in Authentication: A Design-Level Analysis
A practical security engineering field guide to authentication, covering risk, implementation, evidence, and team leadership.
Nathan Berg
Defining the Security Outcome for Authentication
A practical security engineering field guide to authentication, covering risk, implementation, evidence, and team leadership.
A Team Playbook for Improving Threat Modeling
A practical security engineering field guide to threat modeling, covering risk, implementation, evidence, and team leadership.
Operating Threat Modeling: Ownership, Evidence, and Exceptions
A practical security engineering field guide to threat modeling, covering risk, implementation, evidence, and team leadership.
Engineering Threat Modeling into the Paved Road
A practical security engineering field guide to threat modeling, covering risk, implementation, evidence, and team leadership.
Understanding the MITRE ATT&CK Framework
Understanding the MITRE ATT&CK Framework The MITRE ATT&CK framework is a publicly available knowledge base of adversary tactics and techniques based on real-world observations. It was orig...
An Architecture Review Playbook for Threat Modeling
A practical security engineering field guide to threat modeling, covering risk, implementation, evidence, and team leadership.
Threat Modeling: What the Team Must Decide Before Building
A practical security engineering field guide to threat modeling, covering risk, implementation, evidence, and team leadership.
How to Lead a Review of Security-First Product Engineering
A practical security engineering field guide to security-first product engineering, covering risk, implementation, evidence, and team leadership.
Measuring Security-First Product Engineering Without Vanity Metrics
A practical security engineering field guide to security-first product engineering, covering risk, implementation, evidence, and team leadership.