Adam Shostack

28 papers A* 1A 1C 2Journal 13Unranked 10
YearRankTypeTitle / Venue / Authors
2025 J jnl
Lessons for Cybersecurity from the American Public Health System.
CoRR
Adam Shostack, L. Jean Camp, Yi Ting Chua, Josiah Dykstra, Brian LaMacchia, Daniel Lopresti
2025 J jnl
Publish Your Threat Models! The benefits far outweigh the dangers.
CoRR
Loren Kohnfelder, Adam Shostack
2025 J jnl
Who Are "We"? Power Centers in Threat Modeling.
CoRR
Adam Shostack
2024 C conf
Handling Pandemic-Scale Cyber Threats: Lessons from COVID-19.
NSPW
Josiah Dykstra, Adam Shostack
2024 J jnl
Handling Pandemic-Scale Cyber Threats: Lessons from COVID-19.
CoRR
Adam Shostack, Josiah Dykstra
2024 J jnl
The Boy Who Survived: Removing Harry Potter from an LLM is harder than reported.
CoRR
Adam Shostack
2023 J jnl
Fast, Cheap and Good: Lightweight Methods Are Undervalued.
CoRR
Adam Shostack
2023 J jnl
Nothing Is Good Enough: Fast and Cheap Are Undervalued as Influencers of Security Tool Adoption.
IEEE Secur. Priv.
Adam Shostack
2022 J jnl
25 Years in Application Security: Looking Back, Looking Forward.
IEEE Secur. Priv.
Adam Shostack, Fabio Massacci, Eric Bodden, Antonino Sabetta
2022 J jnl
The Buffet Overflow Café.
IEEE Secur. Priv.
Tadayoshi Kohno, Camille Cobb, Ada Lerner, Michelle Lin, Adam Shostack
2020 — conf
Contextualisation of Data Flow Diagrams for Security Analysis.
GraMSec
Shamal Faily, Riccardo Scandariato, Adam Shostack, Laurens Sion, Duncan Ki-Aries
2020 J jnl
Contextualisation of Data Flow Diagrams for security analysis.
CoRR
Shamal Faily, Riccardo Scandariato, Adam Shostack, Laurens Sion, Duncan Ki-Aries
2020 J jnl
Secure development tools and techniques need more research that will increase their impact and effectiveness in practice.
Commun. ACM
Adam Shostack, Mary Ellen Zurko
2019 J jnl
Empirical Evaluation of Secure Development Processes (Dagstuhl Seminar 19231).
Dagstuhl Reports
Adam Shostack, Matthew Smith, Sam Weber, Mary Ellen Zurko
2017 C conf
Panel: Empirically-based Secure OS Design.
NSPW
Sam Weber, Adam Shostack, Jon A. Solworth, Mary Ellen Zurko
2014 — conf
Elevation of Privilege: Drawing Developers into Threat Modeling.
3GSE
Adam Shostack
2014 J jnl
FUD: a plea for intolerance.
Commun. ACM
Dinei Florêncio, Cormac Herley, Adam Shostack
2014 — conf
Practical Lessons from Creating the Control-Alt-Hack Card Game and Research Challenges for Games In Education and Research.
3GSE
Tamara Denning, Adam Shostack, Tadayoshi Kohno
2013 A* conf
Control-Alt-Hack: the design and evaluation of a card game for computer security awareness and education.
CCS
Tamara Denning, Adam Lerner, Adam Shostack, Tadayoshi Kohno
2013 A conf
Control-Alt-Hack™: a card game for computer security outreach and education (abstract only).
SIGCSE
Tamara Denning, Tadayoshi Kohno, Adam Shostack
2008 — conf
Experiences Threat Modeling at Microsoft.
MODSEC@MoDELS
Adam Shostack
2005 — conf
Avoiding Liability: An Alternative Route to More Secure Products.
WEIS
Adam Shostack
2004 — ch.
What Price Privacy? - and why identity theft is about neither identity nor theft.
Economics of Information Security
Adam Shostack, Paul Syverson
2002 — conf
Timing the Application of Security Patches for Optimal Uptime.
LISA
Steve Beattie, Seth Arnold, Crispin Cowan, Perry Wagle, Chris Wright, Adam Shostack
2001 — conf
Privacy Engineering for Digital Rights Management Systems.
Digital Rights Management Workshop
Joan Feigenbaum, Michael J. Freedman, Tomas Sander, Adam Shostack
2000 — conf
How not to design a privacy system: reflections on the process behind the Freedom product.
CFP
Adam Shostack, Ian Goldberg
1999 — conf
Breaking Up Is Hard To Do: Modeling Security Threats for Smart Cards.
Smartcard
Adam Shostack
1996 — conf
Observed weaknesses in security dynamics' client/server protocol.
Network Threats
Adam Shostack