Frank Swiderski
Threat modeling is a core method for finding design-level security problems before software ships; Swiderski helped provide a structured, approachable treatment of that method for practitioners.
Threat modeling
Frank Swiderski is a software-security practitioner known for work on threat modeling and secure application design. Threat modeling asks a team to identify assets, trust boundaries, likely adversaries, and abuse cases before implementation locks in risky choices.
A practical guide
With Window Snyder, Swiderski co-authored Threat Modeling. The book presents a systematic framework for analyzing application threats and choosing mitigations, aimed at development teams rather than only specialist reviewers.
Design-level security
His contribution reflects a durable lesson in software security: many costly weaknesses begin as design decisions. Addressing them early requires a shared process that developers, architects, and security reviewers can use together.
Timeline
- 2004Co-authors <em>Threat Modeling</em> with Window Snyder.
- 2000sContributes to the spread of developer-oriented threat-modeling practice.
- 2010sThreat modeling becomes a recurring component of secure-development guidance and training.
Frank Swiderski
- Type
- Person
- Era
- 2000s-Present
- Known for
- Co-author of <em>Threat Modeling</em>; Secure software design; Developer-facing security practice
- Tags
- threat-modeling, secure-development, software-security, author, microsoft
Created by Joas A Santos · Something wrong or want it removed? Open an issue.