Experiences threat modeling at Microsoft

CEUR Workshop Proceedings

Volumn 413, Issue , 2008, Pages

  Shostack, Adam ^a  

^a MICROSOFT   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ACADEMIC RESEARCH; DATA FLOW DIAGRAMS; ENUMERATION TECHNIQUES; MICROSOFT; PRODUCTS AND SERVICES; SECURITY ANALYSIS; SECURITY DEVELOPMENT LIFECYCLE; THREAT MODELING;

MODELS;

EID: 84885645251     PISSN: 16130073     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (12)

1. Marwan Abi-Antoun, Daniel Wang and Peter Torr, Checking Threat Modeling Data Flow Diagrams for Implementation Conformance and Security, ASE'07, 2007. Atlanta, Georgia, USA
2. Lorrie Faith Cranor, A Framework for Reasoning About the Human in the Loop, Symposium on Usable Privacy and Security, 2008. Pittsburgh, Pennsylvania, USA
3. Carl Ellison, Ceremony Analysis, Microsoft ThinkWeek paper, January 24, 2005. A version of this paper appears as Cryptography ePrint 2007/399, October 2007. http://eprint.iacr.org/2007/399
4. Shawn Hernan, Scott Lambert, Tomasz Ostwald and Adam Shostack, Uncover Security Design Flaws Using The STRIDE Approach, MSDN magazine, November 2006
5. Michael Howard and David LeBlanc, Writing Secure Code, Microsoft Press, 2001
6. Michael Howard and David LeBlanc, Writing Secure Code, 2nd edition Microsoft Press, 2002
7. Michael Howard and Steven Lipner, The Security Development Lifecycle, Microsoft Press, 2006
8. Microsoft Corporation, "SDL Process Introduction," 2008, http://msdn.microsoft.com/en-us/library/cc307406.aspx
9. Oxford English Dictionary Online, visited July 14, 2008
10. Craig Rubens, Cleantech Terror Alert: Hacking the Grid, Earth2Tech, June 26, 2008, http://earth2tech.com/2008/06/26/ cleantech-terror-alert-hacking-the- grid/
11. Adam Shostack, Reinvigorate your Threat Modeling Process, MSDN Magazine, July 2008
12. Frank Swiderski and Window Snyder, "Threat Modeling," Microsoft Press, 2004