Threat Modeling

By Adam Shostack,

Book cover of Threat Modeling: Designing for Security

Book description

The only security book to be chosen as a Dr. Dobbs Jolt Award Finalist since Bruce Schneier's Secrets and Lies and Applied Cryptography! Adam Shostack is responsible for security development lifecycle threat modeling at Microsoft and is one of a handful of threat modeling experts in the world. Now, he…


Shepherd is reader supported. When you buy books, we may earn an affiliate commission.

Why read it?

1 author picked Threat Modeling as one of their favorite books. Why do they recommend it?

I love this book because it has the power to pull even technical people out of their “security technology will save the world” bubble. I regularly encounter engineers randomly throwing countermeasures like strong encryption, secure boot, and TPMs at devices without knowing why.

This book provided me with a set of methods and practical hints for identifying and assessing relevant security threats—a much better starting point than penetration testing! 

From Dominik's list on embedded system security enthusiasts.

Want books like Threat Modeling?

Our community of 11,000+ authors has personally recommended 7 books like Threat Modeling.

Browse books like Threat Modeling

5 book lists we think you will like!

Interested in cryptography, analytics, and software?

Cryptography 30 books
Analytics 3 books
Software 61 books