{"id":200,"date":"2007-10-04T09:26:39","date_gmt":"2007-10-04T16:26:39","guid":{"rendered":"http:\/\/ryanorser.com\/?p=200"},"modified":"2007-10-04T09:26:39","modified_gmt":"2007-10-04T16:26:39","slug":"20071004-microsofts-larry-osterman-on-threat-modeling","status":"publish","type":"post","link":"https:\/\/ryanorser.com\/index.php\/2007\/10\/04\/20071004-microsofts-larry-osterman-on-threat-modeling\/","title":{"rendered":"2007\/10\/04 Microsoft\u2019s Larry Osterman On Threat Modeling"},"content":{"rendered":"

Wow another Microsoft person that talks about threat modeling. Story from Slashdot.org<\/p>\n

\n

\n

\n

\n

\t\t\tIT<\/a>:<\/span> Microsoft’s Larry Osterman On Threat Modeling<\/a><\/h3>\n

\t \tPosted by \t \tScuttleMonkey<\/a> \ton Monday October 01, @12:42PM<\/strong>
\nfrom the they-threat-model-at-microsoft<\/strong> dept.<\/strong><\/p>\n

\t\t \t\t \t\t\t \t\t\t\t\"Security\" \t\t\t<\/a><\/p>\n

\t\t\tSchneier has pointed out an excellent series of blog posts about threat modeling<\/a> by Microsoft’s Larry Osterman. The series focuses on the PlaySound API as an example. “As you go about filling in the threat model threat list, it’s important to consider the consequences of entering threats and mitigations. While it can be easy to find threats, it is important to realize that all threats have real-world consequences for the development team. At the end of the day, this process is about ensuring that our customer’s machines aren’t compromised. When we’re deciding which threats need mitigation, we concentrate our efforts on those where the attacker can cause real damage.”<\/em><\/p>\n<\/blockquote>\n

\n

\u00a0As we all know Microsoft would say, “Darn hackers!”<\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

Wow another Microsoft person that talks about threat modeling. Story from Slashdot.org IT: Microsoft’s Larry Osterman On Threat Modeling Posted by ScuttleMonkey on Monday October 01, @12:42PM from the they-threat-model-at-microsoft dept. Schneier has pointed out an excellent series of blog posts about threat modeling by Microsoft’s Larry Osterman. The series focuses on the PlaySound API […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[],"_links":{"self":[{"href":"https:\/\/ryanorser.com\/index.php\/wp-json\/wp\/v2\/posts\/200"}],"collection":[{"href":"https:\/\/ryanorser.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ryanorser.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ryanorser.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/ryanorser.com\/index.php\/wp-json\/wp\/v2\/comments?post=200"}],"version-history":[{"count":0,"href":"https:\/\/ryanorser.com\/index.php\/wp-json\/wp\/v2\/posts\/200\/revisions"}],"wp:attachment":[{"href":"https:\/\/ryanorser.com\/index.php\/wp-json\/wp\/v2\/media?parent=200"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ryanorser.com\/index.php\/wp-json\/wp\/v2\/categories?post=200"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ryanorser.com\/index.php\/wp-json\/wp\/v2\/tags?post=200"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}