Adam Shostack is responsible for security development lifecycle threat modeling at Microsoft and is one of a handful of threat modeling experts in the world. Now, he is sharing his considerable expertise into this unique book. With pages of specific actionable advice, he details how to build better security into the design of systems, software, or services from the outset. You'll explore various threat modeling approaches, find out how to test your designs against threats, and learn effective ways to address threats that have been validated at Microsoft and other top companies.

Adam Shostack在微软负责安全开发生命周期的威胁建模，是世界上为数不多的威胁建模专家之一。现在，他在这本独特的书中分享了他大量的专业知识。通过几页具体的可操作建议，他详细介绍了如何从一开始就在系统、软件或服务的设计中建立更好的安全性。你将探索各种威胁建模方法，了解如何针对威胁测试你的设计，并学习有效的方法来解决已经在微软和其他顶级公司得到验证的威胁。