3 citations · 6 across the 5 of their papers we have counts for
5 papers
Publish Your Threat Models! The benefits far outweigh the dangers
Loren Kohnfelder, Adam Shostack
Threat modeling has long guided software development work, and we consider how Public Threat Models (PTM) can convey useful security information to others. We list some early adopt…
Lessons for Cybersecurity from the American Public Health System
Adam Shostack, L. Jean Camp, Yi Ting Chua +3
The United States needs national institutions and frameworks to systematically collect cybersecurity data, measure outcomes, and coordinate responses across government and private…
Who Are "We"? Power Centers in Threat Modeling
Adam Shostack
I examine threat modeling techniques and questions of power dynamics in the systems in which they're used. I compare techniques that can be used by system creators to those used by…
Handling Pandemic-Scale Cyber Threats: Lessons from COVID-19
Adam Shostack, Josiah Dykstra
The devastating health, societal, and economic impacts of the COVID-19 pandemic illuminate potential dangers of unpreparedness for catastrophic pandemic-scale cyber events. While t…
The Boy Who Survived: Removing Harry Potter from an LLM is harder than reported
Adam Shostack
Recent work arXiv.2310.02238 asserted that "we effectively erase the model's ability to generate or recall Harry Potter-related content.'' This claim is shown to be overbroad. A sm…