Ask me anything about your lessons or your code.
“What is a port?” · “Why is my code erroring?”
The cheapest place to kill a vulnerability is a whiteboard, before any code exists.
What Threat Modeling Buys You
The cheapest place to kill a vulnerability is a whiteboard, before any code exists.
STRIDE
Six categories that turn "what could go wrong" from a stare into a checklist.
Data Flow Diagrams
You cannot threaten a system you cannot see. Draw the data, then draw the fences.
Threat Modeling a Real App
One login flow, walked end to end, with the threats written on every arrow.
Turning Threats Into Fixes
A threat list nobody acts on is a document. Ranked, owned, and tracked, it is a security program.