Adam Shostack

President and distinguished engineer at Shostack + Associates. A leading expert on threat modeling, he has trained hundreds of thousands of people and advised both governments and companies from startups to the Fortune 10.

He helped create the CVE and fixed Autorun, preventing millions of infections.

He serves as a member of the Blackhat Review Board, project lead for OWASP’s Threat Modeling project, editor of the DEF CON Franklin report, and an affiliate professor at the Paul G. Allen School of Computer Science and Engineering at

the University of Washington.

He holds or has held advisory roles at many companies, currently including IANS Research, KeyCaliber and OSSPrey;

nonprofits including serving on the Obsidia project and OSTIF; and academic institutions, including Harvard’s Belfer

Center for International Affairs (co-­ director of the Lessons Learned Project), The Journal of Cybersecurity (Oxford University Press), and the UK Research Institute in Sociotechnical Cybersecurity (RISCS, Honorary Fellow).