3 papers
cs.CR2025
Publish Your Threat Models! The benefits far outweigh the dangers
Loren Kohnfelder, Adam Shostack
Threat modeling has long guided software development work, and we consider how Public Threat Models (PTM) can convey useful security information to others. We list some early adopt…
cs.CR2025
Lessons for Cybersecurity from the American Public Health System
Adam Shostack, L. Jean Camp, Yi Ting Chua +3
The United States needs national institutions and frameworks to systematically collect cybersecurity data, measure outcomes, and coordinate responses across government and private…
cs.CR2025
Who Are "We"? Power Centers in Threat Modeling
Adam Shostack
I examine threat modeling techniques and questions of power dynamics in the systems in which they're used. I compare techniques that can be used by system creators to those used by…