Adam Shostack

Title: Adam Shostack: Innovator in Threat Modeling and Telemetry

Introduction

Adam Shostack is a prominent inventor based in Seattle, WA (US). He has made significant contributions to the fields of threat modeling and telemetry, holding 2 patents that reflect his innovative approach to cybersecurity.

Latest Patents

Shostack's latest patents include "Evaluating the effectiveness of a threat model" and "Collecting anonymous and traceable telemetry." The first patent focuses on evaluating a threat model for structural validity and descriptive completeness. This threat modeling application provides a progress factor or overall score associated with the model's effectiveness. The structural validity is assessed using a data flow diagram, while descriptive completeness is evaluated by reviewing descriptions of threat types within the model. This progress factor encourages modelers to create effective models, ultimately saving time for reviewers. The second patent addresses the collection of anonymous and traceable telemetry. It describes a telemetry source obtaining a certificate from an escrow certificate issuer, which includes information for verification without revealing the telemetry source's identity.

Career Highlights

Adam Shostack is currently employed at Microsoft Technology Licensing, LLC, where he continues to innovate in the field of cybersecurity. His work has had a lasting impact on how organizations approach threat modeling and telemetry collection.

Collaborations

Shostack has collaborated with notable colleagues, including John Eugene Neystadt and Arie Friedman, contributing to advancements in their respective fields.

Conclusion

Adam Shostack's contributions to threat modeling and telemetry demonstrate his commitment to enhancing cybersecurity practices. His innovative patents reflect a deep understanding of the challenges in the field and provide valuable solutions for organizations.