Adam is a leading expert on threat modeling, and a consultant, entrepreneur, technologist, author and game designer. He is an affiliate Professor at the Paul G. Allen School of Computer Science & Engineering at the University of Washington, an advisor to the UK’s Research Institute in Socio-Technical Security, and an advisory board member at the Journal of Cybersecurity and the Privacy Enhancing Technologies Symposium. He's also a member of the BlackHat Review Board, and helped create the CVE and many other things. He currently helps many organizations improve their security via Shostack & Associates, and helps startups become great businesses as an advisor and mentor. While at Microsoft, he drove the Autorun fix into Windows Update, was the lead designer of the SDL Threat Modeling Tool v3 and created the "Elevation of Privilege" game. Adam is the author of Threat Modeling: Designing for Security, and the co-author of The New School of Information Security.
-
Co-Director, Cyber Lessons Learned