Archive

Browse all posts by month and year.

August 2024

• Security Conferences

May 2024

• Measuring Security Effectiveness
• Secure360 2018
• Past Talks

August 2020

• A New Look for Transvasive Security

November 2016

• SIRAcon 2016 – STPA-Sec: stealing from safety engineering to improve threat modeling
• CyberSecureGov 2016: Practical Identity and Access Management
• Site Updates

October 2012

• AppSec USA 2012: Functional Security Requirements using Behavioral Security Modeling
• Musings from the MN Cyber Security Summit

September 2012

• ISC2 Security Congress Talk and SIRACon

August 2012

• Thoughts on Information Safety

July 2012

• Information Safety Basics

June 2012

• Password Security Revisited
• LinkedIn and password security

May 2012

• Behavioral Security Modeling Secure360 Presentation
• Behavioral Security Modeling: Functional Security Requirements
• SIRACon: Organization of Risk Management Programs

April 2012

• Upcoming Talks in 2012
• Some random ideas from RSA 2012

March 2012

• On Money Mules and Credential Theft

February 2012

• Threat Modeling

November 2011

• Introduction to Behavioral Information Security Presentation (updated)
• Video from AppSec USA 2011 now available

September 2011

• Behavioral Security Modeling Presentation
• Speaking at AppSec USA 2011!

June 2011

• Introduction to Behavioral Information Security Presentation

February 2011

• CVSS, Patches, and Vulnerability Management

January 2011

• Behavioral Information Security Part 1: The Failure of Contemporary InfoSec

October 2010

• Why Password Rotation is Bad
• Freeware vs Payware: pick the product that best meets your needs