{"product_id":"threat-modeling-designing-for-security-in-an-ai-world-2nd-edition","title":"Threat Modeling: Designing for Security in an AI World, 2nd Edition","description":"\u003cp\u003e\u003cspan style=\"color: rgb(43, 0, 255);\"\u003e\u003cb\u003eA major update to the definitive guide on threat modeling techniques for secure by design\u003c\/b\u003e\u003c\/span\u003e\u003c\/p\u003e\n\u003cp\u003eMore than just a second edition, \u003ci\u003eThreat Modeling: Designing for Security in an AI World\u003c\/i\u003e thoroughly updates and expands on Adam Shostack's classic text and structured approach to analyzing and designing systems, software, and services for security flaws to address threats and technologies that didn’t exist when the first edition published. Most notably every reader will benefit from two new chapters covering using LLMs to threat model and exploring threats to LLMs, AIs, and ML Models themselves. There’s a new deep focus on agile and an expansion of who's involved in threat modeling, now including non-technical product owners. All told, half of this edition is completely new or heavily revised.\u003c\/p\u003e\n\u003cp\u003eOften called “the Bible of threat modeling,” Shostack’s approach has been adopted across industry, governments and is at the heart of OWASP’s threat modeling approaches. The first edition proved to be enduring and timeless, providing techniques that continued to work as technology and development paradigms shifted.\u003cbr\u003e\u003cbr\u003eThis second edition presents an updated version of Shostack's Four-Question Framework that structures the threat modeling process from initial analysis through remediation. The specific actionable techniques proven from the first edition are updated to draw on thousands of conversations over the last decade. The guidance spans all technology. Readers gain structured methods to evaluate new additions to their technology, or business enterprise, and to select and prioritize effective defenses.\u003c\/p\u003e\n\u003cp\u003e\u003cspan style=\"color: rgb(255, 128, 0);\"\u003eYou'll also discover:\u003c\/span\u003e\u003c\/p\u003e\n\u003cul\u003e\n\u003cli style=\"color: rgb(0, 170, 255);\"\u003e\u003cspan style=\"color: rgb(0, 170, 255);\"\u003eIncreased discussion of cloud, IoT, and mobile\u003c\/span\u003e\u003c\/li\u003e\n\u003cli style=\"color: rgb(0, 170, 255);\"\u003e\u003cspan style=\"color: rgb(0, 170, 255);\"\u003eA new chapter on boundaries, including how to identify and validate them across complex system architectures\u003c\/span\u003e\u003c\/li\u003e\n\u003cli style=\"color: rgb(0, 170, 255);\"\u003e\u003cspan style=\"color: rgb(0, 170, 255);\"\u003eA new chapter on attack lifecycle models introduces the two most popular cyber kill chains, mapping attacker progression stages to identify optimal defensive intervention points\u003c\/span\u003e\u003c\/li\u003e\n\u003cli style=\"color: rgb(0, 170, 255);\"\u003e\u003cspan style=\"color: rgb(0, 170, 255);\"\u003eA new framework for selecting and implementing effective defenses, spanning and clarifying choices from designs on the back of a napkin through systems that have been in operation since before the first edition\u003c\/span\u003e\u003c\/li\u003e\n\u003cli style=\"color: rgb(0, 170, 255);\"\u003e\u003cspan style=\"color: rgb(0, 170, 255);\"\u003eProven techniques for defensively managing remaining risk after threat identification, with structured and repeatable organizational approaches\u003c\/span\u003e\u003c\/li\u003e\n\u003cli style=\"color: rgb(0, 170, 255);\"\u003e\u003cspan style=\"color: rgb(0, 170, 255);\"\u003eA cohesive scaling chapter transitions readers from the technical skills they acquire to the business challenges of scaling threat modeling\u003c\/span\u003e\u003c\/li\u003e\n\u003cli style=\"color: rgb(0, 170, 255);\"\u003e\u003cspan style=\"color: rgb(0, 170, 255);\"\u003eFive legacy chapters and four appendices from the first edition are now available online at the book’s website, making room in the book for all of the new content while keeping cut material available for reference\u003c\/span\u003e\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003eWritten for engineers of all sorts, including security architects, security engineers, penetration testers, software developers building secure products, and IT administrators with security responsibilities, this Second Edition equips practitioners with structured, repeatable methods for identifying threats and designing defenses across any technology stack.\u003c\/p\u003e\n\u003cp\u003eThe first edition showed how secure by design was a real possibility. The second shows even more clearly how to make it happen in your technology and products.\u003c\/p\u003e\n\u003ch2 class=\"section-title\" data-toggle=\"collapse\"\u003e\u003cspan style=\"color: rgb(43, 0, 255);\"\u003eAbout the Author\u003c\/span\u003e\u003c\/h2\u003e\n\u003cdiv class=\"section-content\"\u003e\n\u003cp\u003e\u003cspan style=\"color: rgb(255, 42, 0);\"\u003e\u003cb\u003eAdam Shostack\u003c\/b\u003e\u003c\/span\u003e is a leading expert on threat modeling. He has pioneered the discipline’s foundational approaches, trained hundreds of thousands of people, and advised both governments and companies from startups to the Fortune 10. He led threat modeling at Microsoft and for the past decade has led Shostack + Associates, the firm he founded to build security through threat modeling. He is a member of the Black Hat Review Board and an Affiliate Professor at the University of Washington. At Microsoft, he led the design of the SDL Threat Modeling Tool v3 and created the Elevation of Privilege game. Earlier in his career, he helped create the CVE.\u003c\/p\u003e\n\u003c\/div\u003e","brand":"John Wiley \u0026 Sons","offers":[{"title":"Default Title","offer_id":50694951043142,"sku":"9781394413324","price":5512.0,"currency_code":"INR","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0754\/2797\/1142\/files\/81dp-q5zm2L._SY342.jpg?v=1792581134","url":"https:\/\/cb-india.com\/products\/threat-modeling-designing-for-security-in-an-ai-world-2nd-edition","provider":"Computer Bookshop (India) Pvt Ltd","version":"1.0","type":"link"}