article thumbnail

Review: Practical Cybersecurity Architecture

Adam Shostack

Adam Shostack's review of the book Practical Cybersecurity Architecture There's an insightful comment , "Everybody has a testing environment. Similarly, everybody has both enterprise and product architecture. Importantly, the book is short, readable and grounded, and I've learned a lot reading it.

article thumbnail

Review: Practical Security Architecture

Adam Shostack

” Similarly, everybody has both enterprise and product architecture. I have to say that because “architecture” is much maligned for being heavyweight, disconnected, and irrelevant in today’s world of Dev-Opsy CI/CD moving fast and breaking things. They say nice things about my Threat Modeling book.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Hoarding, Debt and Threat Modeling

Adam Shostack

Maybe one person thinks a good dusting is enough; another that things need to be in containers (books on shelves, desk clutter in baskets, papers in files) and yet another thinks that without bleach, its a waste. On the other side is a whiteboard with a software architecture diagram Some thoughts: Define clean. No new problems.

article thumbnail

Building a Ransomware Resilient Architecture

eSecurity Planet

While security teams layer essential preventative measures, resilience measures also need to be implemented in an architecture to reduce the impact of ransomware attacks on your backups. Figure 1: Typical VLAN architecture. Figure 2: Resilient VLAN architecture. How could this have been prevented? Does this add latency?

article thumbnail

My Take: Is Amazon’s Alexa+ a Gutenberg moment — or a corporate rerun of history’s greatest co-opt?

The Last Watchdog

Bezos launching Amazon with a single book, and Googles Brain Team engineering the transformer architecture that underpins todays GenAIthese are milestones on the same arc. Jeff Bezos sells his first book on a novelty called Amazon.com in 1999. Fast-forward 560 years.

article thumbnail

Mentions

Adam Shostack

Lastly, I'm interviewed as part of Ed Moyle & Diana Kelley's new book, " Practical Cybersecurity Architecture ," now available for pre-order. At 6PM BST (London) today the 23rd, I'll be joining Gamification of threat modelling using OWASP Cornucopia with Grant Ongers.

article thumbnail

NBlog Mar 11 - book review on "Cyber Strategy"

Notice Bored

Siegel and Mark Sweeney Publisher: Auerbach/CRC Press ISBN: 978-0-367-45817-1 Price: ~ US$100 + shipping from Amazon Outline This book lays out a systematic process for developing corporate strategy in the area of cyber (meaning IT) security and resilience. The book makes it a little easier. This stuff is hard.