For companies running a modern, adaptive and defense-centered security program, threat modeling is not a new concept. In fact, it’s one of the core tenets ...

As part of "shift left" to incorporate security discussions earlier in the software development life cycle, organizations are beginning to look at threat modeling to identify security flaws in ...

A monthly overview of things you need to know as an architect or aspiring architect. Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with ...

Cyber preparedness is no longer an option — it’s a necessity. More IT leaders are allocating resources toward defensive measures, and 60% of businesses are increasingly concerned about phishing, ...

Application threat modeling has gotten a bad rap over the years. Security leaders looking to implement application threat modeling with their product teams must contend with stakeholders who see it as ...

Creates an unmatched proprietary threat-model dataset that accelerates how enterprises identify and mitigate application risk Fortifies the software development lifecycle for both security architects ...

In today’s interconnected world, cyberthreats are everywhere, and they’re always changing. Startups can’t afford to ignore the importance of securing their digital infrastructure. Waiting until a ...

Today, let me contrast two 20-year-old papers on threat modeling. My first paper on this topic, "Breaking Up Is Hard to Do," written with Bruce Schneier, analyzed smart-card security. We talked about ...

Join the event trusted by enterprise leaders for nearly two decades. VB Transform brings together the people building real enterprise AI strategy. Learn more Financial services firms are fighting off ...

Affiliate Bruce Schneier notes how the average person's personal threat model has shifted from concerns about corporate overreach to ones about government surveillance. Schneier writes: "These threats ...

Cyber threats don’t just hit your systems — they move through your connections. The ULM shows how those hidden links fuel real risk. When Okta’s support credentials were stolen in 2023, the breach ...