Security utility or what we all really want
Looking back and forward on a twenty-five-year career in cyber security
The Security Champion Framework
Saying goodbye to Security Journey
Thirty-one random #AppSec Thoughts
OWASP Proactive Controls: the answer to the OWASP Top Ten
The best threat modeling representation
Threat modeling and a lack of tools
The AppSec and Startup focused blog 