Geoff Hill - Tutamantic Security Blog

Sign in

Geoff Hill

Defining Threat Actors and Agents

Defining Threat Actors and Agents

A threat actor is an entity that negatively impacts a TARGET and causes an event or incident. Therefore, it is helpful to know the capabilities and impact of various example Threat Actors. This post will outline the significant attributes and how they can describe potential malicious agents. The following Threat

Security Champion responsibilities

Security Champion responsibilities

The security champion should focus on the emergent design of the epic or feature that the team is building. This list breaks down the topics of emergent design and the security champion's integration tasks for the team's sprint workflow: 1. Help to install and maintain the

Cybersecurity for Small Businesses

Getting Started Featured

Cybersecurity for Small Businesses

Baseline security guide for small businesses with lots of urls to help.

Quickly find Elevation Of Privilege issues using CRUD+E (CRUDE)

Find elevation of privilege (EoP) issues quickly using CRUD.

Agile Architecture

Create Minimal but Sufficient Documentation

When documenting requirements, design, and architecture, keep it light.

How to do a Quick & Dirty (pre Threat Model) Software Model

Create a high-level diagram outlining the context of the system in question. Then add threats and relationships.

Welcome to the Tutamantic Security Blog!

Welcome to the Tutamantic Security Blog!

The Tutamantic team is eager to provide short articles on real-world tips, tricks and guidance on how to execute on good application-design security practices. This has led to the birth of this blog. Threat modeling is still considered by many to be an overbearing, manually-intensive and difficult activity. Tutamantic is