Adam Shostack
Leading Expert
Shostack & Associates
Adam is a leading expert on threat modeling and a consultant, expert witness, author and game designer. He has decades of experience delivering security. His experience ranges across the business world from founding startups to nearly a decade at Microsoft.
His accomplishments include:
- Helped create the CVE and is now an Emeritus member of the advisory board.
- Fixed Autorun for hundreds of millions of systems
- Led the design and delivery of the Microsoft SDL Threat Modeling Tool (v3)
- Created the elevation of privilege threat modeling game
- Wrote Threat Modeling: Designing for Security and Threats: What Every Engineer Should Learn from Star Wars
- Co-authored The New School of Information Security
Beyond consulting and training, Shostack serves as a member of the Blackhat Review Board, an advisor to a variety of companies and academic institutions and as an Affiliate Professor at the Paul G. Allen School of Computer Science and Engineering at the University of Washington.
His accomplishments include:
- Helped create the CVE and is now an Emeritus member of the advisory board.
- Fixed Autorun for hundreds of millions of systems
- Led the design and delivery of the Microsoft SDL Threat Modeling Tool (v3)
- Created the elevation of privilege threat modeling game
- Wrote Threat Modeling: Designing for Security and Threats: What Every Engineer Should Learn from Star Wars
- Co-authored The New School of Information Security
Beyond consulting and training, Shostack serves as a member of the Blackhat Review Board, an advisor to a variety of companies and academic institutions and as an Affiliate Professor at the Paul G. Allen School of Computer Science and Engineering at the University of Washington.
