Threat Modeling: Designing for Security (2014)

Bibliography

1.    37 Signals. “Aggressive, spiky button vs. rounded corner button,” Signal vs. Noise, April 5, 2010, https://37signals.com/svn/posts/2255-aggressive-spiky-button-vs-rounded-corner-button.

2.    Abi-Antoun, Marwan, and Jonathan Aldrich. “Static Extraction and Conformance Analysis of Hierarchical Runtime Architectural Structure Using Annotations.” In ACM SIGPLAN Notices, vol. 44, no. 10, pp. 321–40 (ACM, 2009).

3.    Abi-Antoun, Marwan, and Jeffrey M. Barnes. “Analyzing Security Architectures,” Proceedings of the IEEE/ACM International Conference on Automated Software Engineering, pp. 3–12 (ACM, 2010).

4.    Acquisti, Alessandro, Ralph Gross, and Fred Stutzman. “Faces of Facebook: Or, How the Largest Real ID Database in the World Came to Be.” BlackHat USA, August, 2011. Draft available online at http://www.heinz.cmu.edu/˜acquisti/face-recognition-study-FAQ/acquisti-faces-BLACKHAT-draft.pdf.

5.    Adams, A. A., and S. A. Williams, “What's Yours Is Mine and What's Mine's My Own,” unpublished draft, May 8, 2012, http://opendepot.org/id/eprint/1096.

6.    Adams, Scott, Dilbert cartoon, published November 13, 1995, http://thedilbertstore.com/comic_strips/1995/11/13.

7.    Adida, Ben, et al. “CALEA II: Risks of Wiretap Modifications to Endpoints,” Center for Democracy and Technology, May 17 2013, https://www.cdt.org/files/pdfs/CALEAII-techreport.pdf.

8.    Adler, Andy. “Images Can Be Regenerated from Quantized Biometric Match Score Data,” Electrical and Computer Engineering, Canadian Conference on, vol. 1, pp. 469–72 (IEEE, 2004).

9.    Akhawe, Devdatta, Warren He, Zhiwei Li, Reza Moazzezi, and Dawn Song. “Clickjacking Revisited: A Perceptual View of UI Security,” BlackHat USA, August, 2013, http://www.cs.berkeley.edu/˜devdatta/clickjacking.pdf.

10.Alexander, Christopher, Sara Ishikawa, and Murray Silverstein. A Pattern Language (New York: Oxford University Press, 1977).

11.Anderson, Ross. Security Engineering: A Guide to Building Dependable Distributed Systems (Indianapolis: Wiley, 2008).

12._____. “Offender Tagging,” Light Blue Touchpaper blog, last modified September 2, 2013, http://www.lightbluetouchpaper.org/2013/09/02/offender-tagging/.

13._____. “Security and Human Behavior 2013,” Light Blue Touchpaper blog, last modified June 6, 2013, http://www.lightbluetouchpaper.org/2013/06/03/security-and-human-behaviour-2013/.

14.ANSI Z535. “Brief Description of all Six Standards and Safety Color Chart,” accessed October 15, 2013, http://www.nema.org/Standards/z535/Pages/ANSI-Z535-Brief-Description-of-all-Six-Standards-and-Safety-Color-Chart.aspx.

15.Asadollahi, Yahya, Vahid Rafe, Samaneh Asadollahi, and Somayeh Asadollahi. “A Formal Framework to Model and Validate Event-Based Software Architecture,” Procedia Computer Science 3 (2011): 961–66 and http://asmeta.sourceforge.net/.

16.Asadollahi, Yahya, Vahid Rafe, Samaneh Asadollahi, and Somayeh Asadollahi. “A Formal Framework to Model and Validate Event-Based Software Architecture,” Procedia Computer Science 3 (2011): 961–66 and http://asmeta.sourceforge.net/.

17.Aucsmith, David, Brendon Dixon and Robin Martin-Emerson, “Threat Personas”, Microsoft internal document, version 0.9, 2003.

18.Barnard, R.L. Intrusion Detection Systems (Buttersworth, 1988) as cited in Anderson (2008), supra.

19.Beautement, Adam, M. Angela Sasse, and Mike Wonham. “The compliance budget: managing security behaviour in organisations,” In Proceedings of the 2008 workshop on New security paradigms, pp. 47–58. ACM, 2009.

20.Beckert, Bernhard, and Gerd Beuster. “A Method for Formalizing, Analyzing, and Verifying Secure User Interfaces.” In Formal Methods and Software Engineering, pp. 55–73 (Berlin: Springer, 2006).

21.Bell, D. Elliott, and Leonard J. LaPadula. “Secure Computer Systems: Mathematical Foundations,” MTR-2547 (Bedford: The MITRE Corporation, 1973).

22.Bella, Giampaolo, and Lizzie Coles-Kemp. “Seeing the Full Picture: The Case for Extending Security Ceremony Analysis,” Proceedings of the 9th Australian Information Security Management Conference, Edith Cowan University, Perth Western Australia, 5–7 December, 2011.

23.Biba, K. J. “Integrity Considerations for Secure Computer Systems.” MTR-3153. (Bedford: The MITRE Corporation, 1977).

24.Biham, Eli, Alex Biryukov, and Adi Shamir. “Cryptanalysis of Skipjack reduced to 31 rounds using impossible differentials.” In Advances in Cryptology --Eurocrypt'99, pp. 12–23 (Berlin Heidelberg: Springer, 1999).

25.Bonneau, Joseph. “Authentication Is Machine Learning,” Light Blue Touchpaper blog, December 14, 2012 (see in particular comment 2 by Bonneau), http://www.lightbluetouchpaper.org/2012/12/14/authentication-is-machine-learning/.

26._____. “Authenticating Humans to Computers: What I Expect for the Next Ten Years,” streamed live on November 29, 2012, https://www.youtube.com/watch?v=_bnj5Qa_9iU&feature=plcp.

27.Bonneau, Joseph, Cormac Herley, Paul C. Van Oorschot, and Frank Stajano. “The Quest to Replace Passwords: A Framework for Comparative Evaluation of Web Authentication Schemes.” In Security and Privacy (SP), 2012 IEEE Symposium on, pp. 553–67 (IEEE, 2012).

28.Bonneau, Joseph, Mike Just, and Greg Matthews. “What's in a Name?” In Financial Cryptography and Data Security, pp. 98–113 (Berlin, Heidelberg: Springer, 2010).

29.Bovbjerg, Barbara D. “Federal and State Laws Restrict Use of SSNs, Yet Gaps Remain,” U.S. GAO, GAO-05-1016T, September 15, 2005, http://www.gao.gov/new.items/d051016t.pdf.

30.Bowers, Kevin D., Marten van Dijk, Robert Griffin, Ari Juels, Alina Oprea, Ronald L. Rivest, and Nikos Triandopoulos. “Defending Against the Unknown Enemy: Applying FLIPIT to System Security.” In Decision and Game Theory for Security, pp. 248–63 (Berlin: Springer, 2012), http://www.emc.com/emc-plus/rsa-labs/presentations/flipit-gamesec.pdf.

31.Bowker, Geoffrey C., and Susan Leigh Star. Sorting things out: Classification and its consequences, (Cambridge: The MIT Press, 2000).

32.Boyd, Colin, and Anish Mathuria. Protocols for Authentication and Key Establishment (Berlin: Springer, 2003).

33.Brainard, John, Ari Juels, Ronald L. Rivest, Michael Szydlo, and Moti Yung. “Fourth-Factor Authentication: Somebody You Know,” In 2006 ACM Conference on Computer and Communications Security, pp. 168–78.

34.Brenner Center for Justice. “Voter ID,” last updated October 15, 2012, http://www.brennancenter.org/content/section/category/voter_id.

35.Brewer & Darrenougue. “Minutes of the IETF 88 Plenary,” November 6, 2013, http://www.ietf.org/proceedings/88/minutes/minutes-88-iab-techplenary.

36.Buley, Taylor. “Netflix settles privacy lawsuit, cancels prize sequel,” Forbes Firewall blog, March 12, 2010, http://www.forbes.com/sites/firewall/2010/03/12/netflix-settles-privacy-suit-cancels-netflix-prize-two-sequel/.

37.Cameron, Kim. “The Laws of Identity,” last revised May, 2005, http://www.identityblog.com/?p=352.

38.Campanile, Carl. “Dem Pol's Son Was ‘Hacker’,” New York Post, September 19, 2008.

39.Celis, David. “Stop Validating E-mail Addresses with Complicated Regular Expressions,” September 12, 2006, http://davidcel.is/blog/2012/09/06/stop-validating-email-addresses-with-regex/.

40.Chandler, Raymond. Trouble Is My Business: A Novel. Random House Digital, Inc., 2002, http://books.google.com/books?id=TrGxX4kZNLIC

41.Chen, Raymond. “It rather involved being on the other side of this airtight hatchway. . .” The Old New Thing blog, May 8, 2006, http://blogs.msdn.com/b/oldnewthing/archive/2006/05/08/592350.aspx.

42.Chosunilbo. “Real-Name Online Registration to Be Scrapped,” The Chosunilbo, last revised December 30, 2011, http://english.chosun.com/site/data/html_dir/2011/12/30/2011123001526.html.

43.Clarke, Roger. “An Evaluation of Privacy Impact Assessment Guidance Documents,” International Data Privacy Law 1, no. 2 (2011): 111–20, http://idpl.oxfordjournals.org/content/early/2011/02/15/idpl.ipr002.full.pdf,http://idpl.oxfordjournals.org/content/1/2/111.abstract.

44._____. “Privacy Impact Assessment,” May 26, 2003, http://www.rogerclarke.com/DV/PIA.html.

45._____. “Privacy Impact Assessment: Its Origins and Development,” April 2009, http://www.rogerclarke.com/DV/PIAHist-08.html.

46._____. “Cloud Controls Matrix,” Version 3, September 26, 2013, https://cloudsecurityalliance.org/research/ccm/.

47.Cloud Security Alliance (CSA). “Security Guidance,” Version 3, November 14, 2011, https://cloudsecurityalliance.org/research/security-guidance/peer-review/.

48.Convery, S., D. Cook, and M. Franz. ″An Attack Tree for the Border Gateway Protocol (Draft 1), Routing Protocol Security, expired March 17, 2004, http://web.eecs.umich.edu/˜zmao/eecs589/papers/draft-convery-bgpattack-01.txt.

49.Cooper, Alan, and Paul Saffo. The Inmates Are Running the Asylum (Indianapolis: SAMS, 1999).

50.Cooper, A., H. Tschofenig, B. Aboda, J. Peterson, J. Morris, M. Hansen, R. Smith. “Privacy Considerations for Internet Protocols,” RFC 6973, July 2013, http://www.rfc-editor.org/rfc/rfc6973.txt.

51.Cooper, Alan, Robert Reimann, and David Cronin. About Face 3: The Essentials of Interaction Design (Indianapolis: John Wiley & Sons, 2012).

52.Cranor, Lorrie Faith. “A Framework for Reasoning About the Human in the Loop,” Upsec 8 (2008): 1–15.

53.Csikszentmihalyi, Mihaly. Finding flow: The psychology of engagement with everyday life. (New York: Basic Books, 1997).

54._____. Flow: The psychology of optimal experience. (New York: Harpercollins, 1990).

55.Culp, Scott, and Angela Gunn. “Ten Immutable Laws of Security (Version 2.0),” accessed October 16, 2013, http://technet.microsoft.com/en-us/library/hh278941.aspx.

56.CyberSource. “2012 Online Fraud Report,” CyberSource, Fourteenth Annual Industry Report, accessed October 16, 2013, http://forms.cybersource.com/forms/NAFRDQ12012whitepaperFraudReport2012CYBSwww2012.

57.Dalek, Calum T, “Fingerprinting,” Wired, vol. 4, no. 9, page 47, September 1996, http://www.wired.com/wired/archive/4.09/eword.html.

58._____. “Covert Communications Despite Traffic Data Retention.” In Security Protocols XVI, pp. 198–214 (Berlin: Springer, 2011).

59.Danezis, George. Personal communication, 2011.

60.Debian Project. “Debian Security Advisory DSA-1571-1 openssl — Predictable Random Number Generator,” published May 13, 2008, http://www.debian.org/security/2008/dsa-1571., https://wiki.debian.org/SSLkeys#Technical_Summary

61.Deng, Mina. “Privacy preserving content protection,” Ph.D diss., Ph. D. thesis, Katholieke Universiteit Leuven-Faculty of Engineering, 2010.

62.Disquss. “Pseudonyms Drive Community,” Disquss corporate blog, accessed October 16, 2013, http://disqus.com/research/pseudonyms/.

63.Duarte, Nancy. “How to Present to Senior Executives,” Harvard Business Review, October 4, 2012, http://blogs.hbr.org/cs/2012/10/how_to_present_to_senior_execu.html.

64.Duong, Thai, and Juliano Rizzo. “Flickr's API Signature Forgery Vulnerability,” September 2009, http://netifera.com/research/flickr_api_signature_forgery.pdf.

65.EAC Advisory Board. “Elections Operations Assessment: Threat Trees and Matrices and Threat Instance Risk Analyzer,” Elections Assistance Commission, December 23, 2009, submitted by University of South Alabama,http://www.eac.gov/assets/1/Page/Election%20Operations%20Assessment%20Threat%20Trees%20and%20Matrices%20and%20Threat%20Instance%20Risk%20Analyzer%20%28TIRA%29.pdf.

66.Ellison, Carl M. “Ceremony Design and Analysis,” IACR Cryptology ePrint Archive (2007): 399. https://eprint.iacr.org/2007/399.pdf.

67.Ericsson, K. Anders, Ralf T. Krampe, and Clemens Tesch-Römer. “The role of deliberate practice in the acquisition of expert performance.” Psychological review 100, no. 3 (1993): 363.

68.Espenschied, Jonathan, and Angela Gunn. “Threat Genomics,” MetriCon 7, August 7, 2012, http://www.securitymetrics.org/blog/2012/08/19/metricon-7/?page=Metricon7.0.

69.Essers, Loek. “German Privacy Regulator Orders Facebook to End Its Real Name Policy,” ITworld, December 17, 2012, http://www.itworld.com/print/328387.

70.Ferguson, Niels, Bruce Schneier, and Tadayoshi Kohno. Cryptography Engineering (Indianapolis: Wiley, 2012).

71.Ferriss, Timothy. The 4-Hour Chef: The Simple Path to Cooking Like a Pro, Learning Anything, and Living the Good Life, as cited in “Cheat Sheets for Everything.” Boing Boing, November 21, 2012, http://boingboing.net/2012/11/21/timothy-ferriss-cheat-sheets.html.

72.Feynman, Richard P. “Surely You're Joking, Mr. Feynman!”: Adventures of a Curious Character (New York: W.W. Norton & Company, 2010).

73.FIPS. “Data Encryption Standard,” Federal Information Processing Standards Publication 46–2, supersedes FPS PUB 46–1, January 22, 1988, http://www.itl.nist.gov/fipspubs/fip46-2.htm.

74.Fisher, Dennis. “Inside Facebook's Social Authentication System,” ThreatPost blog, March 8, 2012, http://threatpost.com/inside-facebooks-social-authentication-system-030812/76300.

75.Fontana, John. “VeriSign Issues Fraudulent Microsoft Code-Signing Certificates,” Network World Fusion, March 22, 2001, http://www.networkworld.com/news/2001/0322vsign.html.

76.Friedberg, Jeffrey, et al. “Privacy Guidelines for Developing Software Products and Services,” version 3.1, September, 2008.

77.Garfinkel, Simson, personal communication, November 2012.

78.Gawande, Atul. The Checklist Manifesto (Penguin Books: 2010).

79.Gellman, Robert. “Fair Information Practices: A basic History,” version 2.02 of November 11, 2013, http://bobgellman.com/rg-docs/rg-FIPShistory.pdf.

80.Green, Robert Lane. You Are What You Speak (New York: Random House, 2011).

81.Giesen, Florian, Florian Kohlar, and Douglas Stebila. “On the Security of TLS Renegotiation,” 2013, http://eprint.iacr.org/2012/630.pdf.

82.Goldberg, Ian Avrum. “A Pseudonymous Communications Infrastructure for the Internet.” Ph.D diss., University of California, 2000.

83.Goldberg, Ian A., Matthew D. Van Gundy, Berkant Ustaoglu, and Hao Chen. “Multi-Party Off-the-Record Messaging,” 2008, http://www.cypherpunks.ca/˜iang/pubs/mpotr.pdf.

84.Goodin, Dan “'We cannot trust' Intel and Via's chip-based crypto, FreeBSD developers say” December 10, 2013 http://arstechnica.com/security/2013/12/we-cannot-trust-intel-and-vias-chip-bas\ ed-crypto-freebsd-developers-say/

85.Gordon, Lawrence A., and Martin P. Loeb. “The Economics of Information Security Investment,” ACM Transactions on Information and System Security (TISSEC) 5, no. 4 (2002): 438–57.

86._____. Managing Cybersecurity Resources: A Cost-Benefit Analysis (New York: McGraw-Hill, 2006).

87.Gürses, Seda, Carmela Troncoso, and Claudia Diaz. “Engineering Privacy By Design,” COSIC 2011, last accessed October 16, 2013, http://www.cosic.esat.kuleuven.be/publications/article-1542.pdf.

88.Haber, Jeb. “SmartScreen® Application Reputation in IE9,” IEBlog, May 17, 2011, http://blogs.msdn.com/b/ie/archive/2011/05/17/smartscreen-174-application-reputation-in-ie9.aspx.

89.Hall, Joseph M., and M. Eric Johnson. “When Should a Process Be Art,” Harvard Business Review, March 2009.

90.Hashcat, Hashcat advanced password recovery product page, http://hashcat.net/oclhashcat/, visited December 7, 2013.

91.Hazen, John. “Delivering Reliable and Trustworthy Metro Style Apps,” Building Windows 8, May 17, 2012, http://blogs.msdn.com/b/b8/archive/2012/05/17/delivering-reliable-and-trustworthy-metro-style-apps.aspx.

92.Heckman, Rocky. “Application Threat Modeling v2,” TechRepublic/U.S., March 7, 2006, http://www.techrepublic.com/article/application-threat-modeling-v2/6310491.

93.Heitgerd, Janet L., et al. “Community Health Status Indicators: Adding a Geospatial Component,” accessed October 15, 2013, Preventing Chronic Disease 2008;5(3). http://www.cdc.gov/pcd/issues/2008/jul/07_0077.htm.

94.Heninger, Nadia, Zakir Durumeric, Eric Wustrow, and J. Alex Halderman. “Mining Your Ps and Qs: Detection of Widespread Weak Keys in Network Devices,” In Proceedings of the 21st USENIX Security Symposium, August 2012.

95.Herley, Cormac. “So Long, and No Thanks for the Externalities: The Rational Rejection of Security Advice By Users,” In Proceedings of the 2009 Workshop on New Security Paradigms Workshop, pp. 133–44 (ACM, 2009).

96.Hill, Sad. “Caution Sign Has Sharp Edges Do Not Touch,” Sad Hill News, November 9, 2010, http://sadhillnews.com/2010/11/09/us-bans-toner-travel-and-font-usage-unknown-missile-launches/caution-sign-has-sharp-edges-do-not-touch-sad-hill-news.

97.Hillebrand, Gail. “Social Security Number Protection Legislation for States,” Consumers Union, June 2008, http://www.consumersunion.org/pub/core_financial_services/004801.html.

98.Hoffman L. Personal communication. See also the Burroughs tribute page, available at http://www.ianjoyner.name/Burroughs.html.

99.Honan, Mat. “How Apple and Amazon Security Flaws Led to My Epic Hacking,” Wired, August 6, 2012, http://www.wired.com/gadgetlab/2012/08/apple-amazon-mat-honan-hacking/.

100.      Howard, Michael. “Secure Coding Secrets,” Microsoft Security Development Lifecycle blog, November 18, 2008, http://blogs.msdn.com/b/sdl/archive/2008/11/18/secure-coding-secrets.aspx.

101.      Howard, Michael, and David LeBlanc. Writing Secure Code (Redmond: Microsoft Press, 2002) and also 2nd edition, 2009.

102.      Howard, Michael, and Steve Lipner, The Security Development Lifecycle, (Redmond: Microsoft Press, 2006)

103.      Huang, Ling, Anthony D. Joseph, Blaine Nelson, Benjamin I.P. Rubinstein, and J. D. Tygar. “Adversarial Machine Learning,” In Proceedings of the 4th ACM Workshop on Security and Artificial Intelligence, pp. 43–58. ACM, 2011, http://blaine-nelson.com/research/pubs/Huang-Joseph-AISec-2011.

104.      Hutchins, Eric M., Michael J. Cloppert, and Rohan M. Amin. “Intelligence-Driven Computer Network Defense Informed By Analysis of Adversary Campaigns and Intrusion Kill Chains,” Leading Issues in Information Warfare and Security Research 1 (2011): 80;http://www.lockheedmartin.com/content/dam/lockheed/data/corporate/documents/LM-White-Paper-Intel-Driven-Defense.pdf.

105.      Identity Theft Resource Center. “Identity Theft: The Aftermath 2008,” May 28, 2009, http://www.idtriskmgtgroup.com/documents/Aftermath_2008_Highlight.pdf.

106.      Ingoldsby, Terrance R. “Attack Tree-Based Threat Risk Analysis,” Amenaza Technologies Ltd. Copyright 2009, 2010; http://www.amenaza.com/downloads/docs/AttackTreeThreatRiskAnalysis.pdf andhttp://www.screencast.com/users/Amenaza/folders/Default/media/a18cb16a-f88f-4161-b1a4-124e5f06376d.

107.      Jacobs, Jay. “A Call to Arms: It Is Time to Learn Like Experts,” ISSA Journal, November 2011, http://beechplane.files.wordpress.com/2011/11/a-call-to-arms_issa1111.pdf.

108.      Jakobsson, Markus, Erik Stolterman, Susanne Wetzel, and Liu Yang. “Love and Authentication,” Proceedings of the SIGCHI Conference on Human Factors in Computing Systems, pp. 197–200 (ACM, 2008).

109.      Johnson, Steven. The Ghost Map: The Story of London's Most Terrifying Epidemic and How It Changed Science, Cities, and the Modern World (New York: Penguin, 2006).

110.      Jones, J. “An introduction to factor analysis of information risk (fair),” Norwich Journal of Information Assurance 2, no. 1 (2006): 67, riskmanagementinsight.com/media/documents/FAIR_Introduction.pdf.

111.      Just, Mike. “Designing and Evaluating Challenge-Question Systems,” Security and Privacy, IEEE 2, no. 5 (2004): 32–39.

112.      Kahn, David. The Codebreakers (New York: Scribner, 1996).

113.      Kahneman, Daniel. Thinking, Fast and Slow (New York: Farrar, Straus and Giroux, 2011).

114.      Kahney, Leander, “Twist a pen, open a lock,” Wired.com, Sep 17 2004, http://www.wired.com/culture/lifestyle/news/2004/09/64987.

115.      Karlof, Chris, J. Doug Tygar, and David Wagner. “Conditioned-Safe Ceremonies and a User Study of an Application to Web Authentication,” SOUPS, 2009.

116.      Kelsey, John. Comment on “Think Like an Attacker?” Emergent Chaos blog, September 19, 2008, http://emergentchaos.com/archives/2008/09/think-like-an-attacker.html.

117.      Kent, Jonathan. “Malaysia Car Thieves Steal Finger,” BBC News online, March 31 2005, http://news.bbc.co.uk/2/hi/asia-pacific/4396831.stm.

118.      Kerckhoffs, Auguste. “La cryptographie militaire,” Journal des sciences militaires, vol. IX, pp. 5–38, Jan. 1883, pp. 161–191, Feb. 1883.

119.      Kim, Gene, Kurt Milne, and Dan Phelps. “Prioritizing IT Controls for Effective Measurable Security,” IT Process Institute (2006).

120.      Kim, Gene H., and Eugene H. Spafford. “The Design and Implementation of Tripwire: A File System Integrity Checker,” In Proceedings of the Second ACM Conference on Computer and Communications Security, pp. 18–29. ACM, 1994,http://dl.acm.org/citation.cfm?id=191183.

121.      Klien, Gary, Sources of Power (Cambridge: MIT Press, 1999).

122.      Koblitz, Neal, and Alfred J. Menezes. “Another look at ‘provable security’,” Journal of Cryptology 20, no. 1 (2007): 3–37. And generally, http://anotherlook.ca.

123.      Kocher, Paul, “Surviving Moore's Law: Security, AI, and Last Mover Advantage,” Usenix Security 2006, https://www.usenix.org/conference/15th-usenix-security-symposium/surviving-moores-law-security-ai-and-last-mover-advantage.

124.      Kohnfelder, Loren, and Praerit Garg, The threats to our products, Microsoft Interface, April 1, 1999. Available at http://blogs.msdn.com/sdl/attachment/9887486.ashx.

125.      Komanduri, Saranga, Richard Shay, Patrick Gage Kelley, Michelle L. Mazurek, Lujo Bauer, Nicolas Christin, Lorrie Faith Cranor, and Serge Egelman. “Of Passwords and People: Measuring the Effect of Password-Composition Policies,” In Proceedings of the SIGCHI Conference on Human Factors in Computing Systems, pp. 2595–2604. ACM, 2011, http://www.pdl.cmu.edu/PDL-FTP/Storage/mazurek-chi11_abs.shtml.

126.      Krebs, Brian, “Data Broker Giants Hacked by ID Theft Service,” September 25, 2013, http://krebsonsecurity.com/2013/09/data-broker-giants-hacked-by-id-theft-service/.

127.      Lang, Keith. “The Science of Aesthetics,” UXAustralia 2009, http://vimeo.com/6527897, and comments https://twitter.com/songcarver/status/283070446990151681.

128.      Laser Software. http://laser.cs.umass.edu/release/.

129.      Laurie, Ben, and Richard Clayton. “Proof-of-Work Proves Not to Work, version 0.2,” Workshop on Economics and Information Security, 2004.

130.      LeBlanc, David, “Practical Windows Sandboxing” blog series, July 27, 2007, http://blogs.msdn.com/b/david_leblanc/archive/2007/07/27/practical-windows-sandboxing-part-1.aspx.

131.      Levien, Raph. “Snowflakes As Visual Hashes,” post to “Best of Security” mailing list, May 17, 1996, http://marc.info/?l=best-of-security&m=96843702220490&w=2.

132.      Lightstone, Sam. Making It Big in Software: Get the Job. Work the Org. Become Great (Boston: Pearson, 2010).

133.      Lindstrom, Peter. “A Modest Proposal to Eliminate the SSN Façade,” Spire Security Viewpoint blog, April 11, 2006, http://spiresecurity.typepad.com/spire_security_viewpoint/2006/04/a_modest_propos.html.

134.      Lipner, Steve. Personal communication, 2008.

135.      Lyn, Tan Ee. “Cancer Patient Held at Airport for Missing Fingerprint,” Reuters, May 27, 2009, http://www.reuters.com/article/2009/05/27/us-fingerprints-idUSTRE54Q42P20090527?feedType=RSS&feedName=oddlyEnoughNews&rpc=22&sp=true.

136.      Magretta, Joan. What Management Is (New York: Simon and Schuster, 2002).

137.      Malhotra, Vikas. “Protected View in Office 2010,” Microsoft Office 2010 Engineering blog, August 13, 2009, http://blogs.technet.com/b/office2010/archive/2009/08/13/protected-view-in-office-2010.aspx.

138.      Marlinspike, Moxie. “The Cryptographic Doom Principle,” Thought Crime blog, December 13, 2011, http://www.thoughtcrime.org/blog/the-cryptographic-doom-principle/.

139.      _____. “The Convergence System: SSL and The Future of Authenticity,” a talk given at BlackHat, July 2011, http://www.blackhat.com/html/bh-us-11/bh-us-11-briefings.html#Marlinspike.

140.      Marshall, Andrew. “Intersystem Review: Tearing at the Seams Between Dependent Threat Models,” Microsoft internal document, January 2013.

141.      Martina, Jean Everson, and Marcelo Carlomagno Carlos. “Why Should We Analyze Security Ceremonies?,” First CryptoForma Workshop, May 2010, http://www.marcelocarlomagno.com/downloads/pdf/martina2010.pdf.

142.      Masnick, Mike. “Lavabit Details Unsealed: Refused to Hand Over Private SSL Key Despite Court Order and Daily Fines,” TechDirt, October 2, 2013, http://www.techdirt.com/articles/20131002/14500424732/lavabit-details-unsealed-refused-to-hand-over-private-ssl-key-despite-court-order-daily-fines.shtml.

143.      Margosis, Aaron, “Problems of Privilege, Find and Fix LUA Bugs,” Technet Magazine, August 2006, http://technet.microsoft.com/en-us/magazine/cc160944.aspx.

144.      Matsumoto, Tsutomu, Hiroyuki Matsumoto, Koji Yamada, and Satoshi Hoshino. “Impact of Artificial ‘Gummy’ Fingers on Fingerprint Systems,” Proceedings of SPIE Vol. #4677, Optical Security and Counterfeit Deterrence Techniques IV, Thursday-Friday 24–25 January 2002, http://cryptome.org/gummy.htm.

145.      McCullagh, Declan, “AOL's disturbing glimpse into users' lives”, August 7, 2006 CNet, http://news.cnet.com/2100-1030_3-6103098.html.

146.      McGraw, Gary, and John Steven. “An Interview with John Steven,” Silver Bullet Security Podcast, Show 068, November 30, 2011, http://www.cigital.com/silver-bullet/show-068/.

147.      McKenzie, Partick, “Falsehoods Programmers Believe About Names,” June 17, 2010 http://www.kalzumeus.com/2010/06/17/falsehoods-programmers-believe-about-names/

148.      McMillan, Robert. “CSO says Cisco security is growing up,” Infoworld, August 6, 2008, http://www.infoworld.com/d/security-central/cso-says-cisco-security-growing-705.

149.      _____. “Google Attack Part of Widespread Spying Effort,” Computerworld, January 13, 2010, http://www.computerworld.com/s/article/9144221/Google_attack_part_of_widespread_spying_effort.

150.      McRee, Russ, “IT Infrastructure Threat Modeling Guide” June 22, 2009 http://blogs.technet.com/b/secguide/archive/2009/06/22/it-infrastructure-threat-modeling-guide.aspx

151.      McWhorter, John. The Power of Babel: A Natural History of Language (New York: HarperCollins, 2003).

152.      Meier, J. D. Improving Web Application Security: Threats and Countermeasures (Redmond: Microsoft Press, 2003) or http://msdn.microsoft.com/en-us/library/ms994812.aspx.

153.      Microsoft. “Assess Your Security,” Microsoft Security Development Lifecycle (SDL) Optimization Model, last accessed October 16, 2013, http://www.microsoft.com/security/sdl/learn/assess.aspx.

154.      Microsoft. SIR, vol. 11, Microsoft Security Intelligence Report, 2011, Last accessed October 16, 2013, http://www.microsoft.com/security/sir/default.aspx.

155.      _____. “The Zen of Program Management,” Microsoft JobsBlog, February 14, 2007, http://microsoftjobsblog.com/zen-of-pm.

156.      Microsoft SDL Team. “Appendix N: SDL Security Bug Bar (Sample),” 2012, http://msdn.microsoft.com/en-us/library/windows/desktop/cc307404.aspx.

157.      Miller, George A. “The magical number seven, plus or minus two: some limits on our capacity for processing information,” Psychological review 63, no. 2 (1956): 81.

158.      Miller, Robert B., Stephen Heiman, and Tad Tuleja. The New Strategic Selling: The Unique Sales System Proven Successful by the World's Best Companies (New York: Business Plus, 2005).

159.      MITRE. “Attack Patterns: Knowing Your Enemies in Order to Defeat Them,” BlackHat, Washington, D.C., 2007, http://capec.mitre.org/documents/Attack_Patterns-Knowing_Your_Enemies_in_Order_to_Defeat_Them-Paper.pdf.

160.      _____. “CAPEC-89: Pharming,” last updated June 21, 2013, http://capec.mitre.org/data/definitions/89.html.

161.      _____. “CAPEC-1000, Mechanism of Attack,” last updated June 21, 2013, http://capec.mitre.org/data/definitions/1000.html.

162.      Moore, Andrew P., Robert J. Ellison, and Richard C. Linger. “Attack Modeling for Information Security and Survivability,” No. CMU-SEI-2001-TN-001. Carnegie-Mellon University, Pittsburgh, PA, Software Engineering Institute, 2001,http://www.sei.cmu.edu/library/abstracts/reports/01tn001.cfm.

163.      Muffett, Alec. “Regulators, Password Hashing & Crypto Considered As a Branding Exercise: #bcrypt #security /cc @schneierblog @glynwintle,” dropsafe blog, June 15, 2012, http://dropsafe.crypticide.com/article/9439/comment-page-1#comment-47595.

164.      Murray, Mike. Forget the Parachute, Let Me Fly The Plane (Seattle: Amazon Digital Services, 2011) http://www.amazon.com/Forget-Parachute-Let-Fly-Plane-ebook/dp/B004ULVMKC.

165.      Nagar, Abhishek. “Biometric Template Security,” Ph.D diss., Michigan State University, 2012.

166.      Narayanan, Arvind, and Vitaly Shmatikov. “Robust de-anonymization of large sparse datasets,” In Security and Privacy, 2008. SP 2008. IEEE Symposium on, pp. 111–125. IEEE, 2008.

167.      Nather, Wendy. “All about ‘cheeseburger risk’,” 415 Security Blog, January 15, 2013, http://informationsecurity.451research.com/?p=4851.

168.      National Bureau of Standards. “Guidelines for Automatic Data Processing Physical Security and Risk Management,” FIPS Pub 31, 1974, pp. 12–14.

169.      Neighly, Madeline, and Maruice Emsellem. “Wanted: Accurate FBI Background Checks for Employment,” National Employment Law Project, July 2013, http://www.nelp.org/page/-/SCLP/2013/Report-Wanted-Accurate-FBI-Background-Checks-Employment.pdf.

170.      Neilsen Hayden, Patrick. “Please Enter a Valid Last Name,” Making Light blog, December 11, 2012, http://nielsenhayden.com/makinglight/archives/014624.html.

171.      Netflix. “Lessons Netflix Learned from the AWS Outage,” Netflix, April 29, 2011, http://techblog.netflix.com/2011/04/lessons-netflix-learned-from-aws-outage.html.

172.      Nguyen, Duc. “Your Face Is Not your password,” BlackHat DC 2009, http://www.blackhat.com/presentations/bh-dc-09/Nguyen/BlackHat-DC-09-Nguyen-Face-not-your-password.pdf.

173.      Nguyen, Joe. “Cookie Deletion: Why It Should Matter to Advertisers and Publishers,” ClickZ.com, March 2, 2011, http://www.clickz.com/clickz/column/2281571/cookie-deletion-why-it-should-matter-to-advertisers-and-publishers.

174.      Nissenbaum, Helen. Privacy in context: Technology, policy, and the integrity of social life (Palo Alto: Stanford University Press, 2009).

175.      NIST. “Minimum Security Requirements for Federal Information and Information Security,” FIPS Pub 200, March 2006, http://csrc.nist.gov/publications/fips/fips200/FIPS-200-final-march.pdf.

176.      OECD. ″OECD Guidelines on the Protection of Privacy and Transborder Flows of Personal Data, updated 2013, http://www.oecd.org/document/18/0,3746,en_2649_34223_1815186_1_1_1_1,00.html.

177.      Office of the Victorian Privacy Commissioner. “A Guide to Completing Parts 3 to 5 of Your Privacy Impact Assessment Report,” Office of the Victorian Privacy Commissioner, Australia, 2009, https://www.privacy.vic.gov.au/privacy/web2.nsf/files/privacy-impact-assessments-report-accompanying-guide/$file/guideline_05_09_no2.pdf.

178.      _____. “Privacy Impact Assessment: A Guide for the Victorian Public Sector,” Office of the Victorian Privacy Commissioner, Australia, April 2009, https://www.privacy.vic.gov.au/privacy/web2.nsf/files/privacy-impact-assessments-guide/$file/guideline_05_09_no1.pdf.

179.      Ollman, Gunter. “The Opt-In Botnet Generation: Social Networks, Hacktivism, and Centrally-Controlled Protesting,” Damballa, Inc. white paper, retrieved 2010.

180.      Openwall. “ASIC/FPGA Attacks on Modern Hashes,” pg. 45, last accessed October 16, 2013, http://www.openwall.com/presentations/Passwords12-The-Future-Of-Hashing/mgp00045.html.

181.      _____. “GPU Attacks on Modern Hashes,” pg. 46, last accessed October 16, 2013, http://www.openwall.com/presentations/Passwords12-The-Future-Of-Hashing/mgp00046.html.

182.      Osterman, Larry. “Threat Modeling Again, Presenting the PlaySound Threat Model,” Larry Osterman's Weblog, September 17, 2007, http://blogs.msdn.com/b/larryosterman/archive/2007/09/17/threat-modeling-again-presenting-the-playsound-threat-model.aspx.

183.      OWASP. “2013 Top 10 List,” OWASP.org, last modified June 23, 2013, https:// www.owasp.org/index.php/Top_10_2013-Top_10.

184.      _____. “Attack Template,” OWASP.org, last modified May 6, 2008, https:// www.owasp.org/index.php/Attack_template.

185.      _____. “Cache Poisoning,” last revised April 23, 2009, https://www.owasp .org/index.php/Cache_Poisoning.

186.      _____. “Category: Attack,” OWASP.org, last modified on August 10, 2012, https://www.owasp.org/index.php/Category:Attack.

187.      _____. “XSS Filter Evasion Cheat Sheet”, last revised September 17, 2013 https://www.owasp.org/index.php/XSS_Filter_Evasion_Cheat_Sheet

188.      PCI Security Standards. “PCI DSS Quick Reference Guide: Understanding the Payment Card Industry Data Security Standard Version 2.0,” 2010, https://www.pcisecuritystandards.org/documents/PCI%20SSC%20Quick%20Reference%20Guide.pdf.

189.      Percival, Colin. “SCrypt: A Key Derivation Function,” December 4, 2012, http://www.daemonology.net/papers/scrypt-2012-slides.pdf.

190.      Perlow, Jon. “New in Labs: Stop Sending Mail You Later Regret,” Official Gmail Blog, October 6, 2008, http://gmailblog.blogspot.com/2008/10/new-in-labs-stop-sending-mail-you-later.html.

191.      Peterson, Gunnar, personal communication 2009.

192.      Petitcolas, Fabien A. (translator) “La Cryptographie Militaire: Journal des Sciences Militaires,” Janvier 1883, last updated May 29, 2013, http://www.petitcolas.net/fabien/kerckhoffs/crypto_militaire_1.pdf and http://www.petitcolas.net/fabien/kerckhoffs/.

193.      Pfitzmann, Andreas, and Marit Hansen. “A Terminology for Talking About Privacy by Data Minimization: Anonymity, Unlinkability, Undetectability, Unobservability, Pseudonymity, and Identity Management.” Version 0.34, Aug 10 (2010),https://kantarainitiative.org/confluence/download/attachments/45059055/terminology+for+talking+about+privacy.pdf.

194.      Pilgrim, Mark. “Avoid Common Pitfalls in Greasemonkey. How the History of Greasemonkey Security Affects You Now,” O'Reilly Network, November 11, 2005, http://www.oreillynet.com/lpt/a/6257.

195.      Power, Richard. “There Is an Elephant in the Room; and Everyone's Social Security Numbers Are Written on Its Hide,” CyBlog, July 6, 2009, http://www.cyblog.cylab.cmu.edu/2009/07/there-is-elephant-in-room-everyones.html.

196.      Provos, Niels, and David Mazieres. “A Future-Adaptable Password Scheme,” In USENIX Annual Technical Conference, FREENIX Track, pp. 81–91. 1999.

197.      Ptacek, Thomas. “Applied Cryptography Engineering,” Sockpuppet.org blog, July 22, 2013, http://sockpuppet.org/blog/2013/07/22/applied-practical-cryptography/.

198.      Ptacek, Thomas H., and Timothy N. Newsham. “Insertion, evasion, and denial of service: Eluding network intrusion detection,” Secure Networks Inc., Calgary, Alberta Canada, 1998.

199.      Rabkin, Ariel. “Personal Knowledge Questions for Fallback Authentication: Security Questions in the Era of Facebook,” In Proceedings of the Fourth Symposium on Usable Privacy and Security, pp. 13–23. ACM, SOUPS, July 23–25, 2008, Pittsburgh, PA.

200.      Radke, Kenneth, Colin Boyd, Juan Gonzalez Nieto, and Margot Brereton. “Ceremony Analysis: Strengths and Weaknesses,” In Future Challenges in Security and Privacy for Academia and Industry, pp. 104–15 (Berlin: Springer, 2011).

201.      Rains, Tim. “Software Vulnerability Management at Microsoft,” post to Microsoft Security Blog, June 30, 2013, http://blogs.technet.com/b/security/archive/2013/07/01/software-vulnerability-management-at-microsoft.aspx and linked white paper of the same name, July 2010.

202.      Raymond, Eric S. The Cathedral and the Bazaar: Musings on Linux and Open Source by an Accidental Revolutionary (Sebastopol: O'Reilly, 2001).

203.      Reason, James T. The Human Contribution: Unsafe Acts, Accidents and Heroic Recoveries (Burlington: Ashgate Publishing, 2008).

204.      Reeder, R. W. “Expandable Grids: A User Interface Visualization Technique and a Policy Semantics to Support Fast, Accurate Security and Privacy Policy Authoring.” Ph.D thesis, Carnegie-Mellon University Computer Science Department. CMU tech report number CMU-CS-08-143 (July 2008).

205.      Reeder, Rob, E. Kowalczyk, and Adam Shostack. “Helping engineers design NEAT security warnings,” In Proceedings of the Symposium On Usable Privacy and Security (SOUPS), Pittsburgh, PA. 2011.

206.      Reeder, Robert W. “Measuring Trust User Experiences,” Microsoft internal document, March 10, 2008.

207.      Reeder, Robert W., Lujo Bauer, Lorrie F. Cranor, Michael K. Reiter, and Kami Vaniea. “More Than Skin Deep: Measuring Effects of the Underlying Model on Access-Control System Usability,” In Proceedings of the SIGCHI Conference on Human Factors in Computing Systems, pp. 2065–74. ACM, 2011, http://www.ece.cmu.edu/˜lbauer/papers/2011/chi2011-semantics.pdf.

208.      Reiger, Frank, “Chaos Computer Club breaks Apple TouchID,” Blog post 21 September, 2013, http://www.ccc.de/en/updates/2013/ccc-breaks-apple-touchid.

209.      Reiner, Rob. The Princess Bride. Buttercup Films, Ltd. 1987. (DVD)

210.      Remes, Wim. “wow. . . Hotwire removes stored CC information from account upon password reset. That's actually awesome,” Twitter, July 20, 2013, https://twitter.com/wimremes/status/358709749585416193.

211.      Rescorla, Eric, and Brian Korver. “Guidelines for Writing RFC Text on Security Considerations,” BCP 72, RFC 3552, July 2003, http://www.ietf.org/rfc/rfc3552.txt.

212.      Revuru, Anil. “Threat Analysis and Modeling (TAM) v3.0—Learn about the New Features,” http://blogs.msdn.com/b/threatmodeling/archive/2009/07/20/threat-analysis-and-modeling-tam-v3-0-learn-about-the-new-features.aspx.

213.      Rice, Alex. “A Continued Commitment to Security,” January 26, 2011, https://blog.facebook.com/blog.php?blog_id=company&blogger=503683099 and https://www.facebook.com/notes/486790652130.

214.      _____. “Social Authentication,” Microsoft Blue Hat, December 14, 2012, https://channel9.msdn.com/Events/Blue-Hat-Security-Briefings/BlueHat-Security-Briefings-Fall-2012-Sessions/BH1202, and personal communication.

215.      Ristić, Ivan, SSL Threat Model, September 9, 2009 http://blog.ivanristic.com/2009/09/ssl-threat-model.html

216.      Roberts, Paul F. “Leaky Web Sites Provide Trail of Clues About Corporate Executives,” IT World, August 13, 2012, http://www.itworld.com/it-managementstrategy/289519/leaky-web-sites-provide-trail-clues-about-corporate-executives.

217.      Rosenquist, Matt, “Prioritizing Information Security Risks With Threat Agent Risk Assessment,” Intel Corporation White Paper, December 2009.

218.      Ross, Arun A., Jidnya Shah, and Anil K. Jain. “Toward Reconstructing Fingerprints from Minutiae Points,” In SPIE Proceedings Vol. 5779, pp. 68–80. International Society for Optics and Photonics, 2005.

219.      Rubin, Jeffrey, and Dana Chisnell. Handbook of Usability Testing: How to Plan, Design, and Conduct Effective Tests, 2nd Edition (Indianapolis: Wiley, 2008).

220.      Ruderman, Jesse. “Race Conditions in Security Dialogs,” SquareFree.com, July 1, 2004, http://www.squarefree.com/2004/07/01/race-conditions-in-security-dialogs/.

221.      Ruiz, Guifré, Elisa Heymann, Eduardo César, and Barton P. Miller. “Automating Threat Modeling Through the Software Development Life-Cycle,” XXIII Jornadas de Paralelismo (JP2012), Elche, Spain, September 2012.http://www.jornadassarteco.org/js2012/papers/paper_92.pdf.

222.      _____. “Detecting Cognitive Causes of Confidentiality Leaks,” Electronic Notes in Theoretical Computer Science 183 (2007): 21–38.

223.      Rukšenas, Rimvydas, Paul Curzon, and Ann Blandford. “Modelling and Analysing Cognitive Causes of Security Breaches,” Innovations in Systems and Software Engineering 4, no. 2 (2008): 143–60, http://www.eecs.qmul.ac.uk/˜pc/publications/2008/rrpcabISSE2008preprint.pdf.

224.      Ryan, Peter. Modeling and Analysis of Security Protocols (Boston: Addison Wesley, 2000).

225.      Saitta, Paul, Brenda Larcom, and Michael Eddington. “Trike v. 1 methodology document [draft],” July 13, 2005, http://dymaxion.org/trike/Trike_v1_Methodology_Documentdraft.pdf.

226.      Salter, Chris, O. Sami Saydjari, Bruce Schneier, and Jim Wallner. “Toward a Secure System Engineering Methodology,” In Proceedings of the 1998 workshop on New Security Paradigms, pp. 2–10 (ACM, 1998), http://www.schneier.com/paper-secure-methodology.html.

227.      Sassaman, Len, Meredith L. Patterson, Sergey Bratus, and Michael E. Locasto. “Security Applications of Formal Language Theory,” IEEE Systems Journal 7(3): 489–500 (2013).

228.      Sasse, Angela. Personal communication, 2012.

229.      SC Magazine. “Amenaza Technologies Ltd. SecurITree” review, February 1, 2007, http://www.scmagazine.com/amenaza-technologies-ltd-securitree/review/1105/.

230.      Schechter, Stuart. “Common Pitfalls in Writing About Security and Privacy Human Subjects Experiments, and How to Avoid Them,” Microsoft Research, January 15, 2013, MSR-TR-2013-5, http://research.microsoft.com/apps/pubs/default.aspx?id=179980.

231.      Schechter, Stuart, A. J. Bernheim Brush, and Serge Egleman. “It's No Secret: Measuring the Security and Reliability of Authentication via ‘Secret’ Questions,” Microsoft Research, May 17, 2009, http://research.microsoft.com/apps/pubs/default.aspx?id=79594.

232.      Schechter, Stuart, Serge Egelman, and Robert W. Reeder. “It's Not What You Know, But Who You Know: A Social Approach to Last-Resort Authentication,” In Proceedings of the SIGCHI Conference on Human Factors in Computing Systems, pp. 1983–92 (ACM, 2009), http://research.microsoft.com/apps/pubs/default.aspx?id=79349.

233.      Schmid, Joachim. “AsmGofer,” last updated 2009, http://www.tydo.de/doktorarbeit.html.

234.      Schnieier, Bruce. “Announcing: Movie Plot Threat Contest,” Blog post, April 1, 2006, https://www.schneier.com/blog/archives/2006/04/announcing_movi.html.

235.      _____. “Attack Trees,” Dr. Dobb's Journal, December 1999, Schneier blog, http://www.schneier.com/paper-attacktrees-ddj-ft.html.

236.      SDL Team. “Necessary, Explained, Actionable, and Tested (NEAT) Cards” SDL blog, October 9, 2012, http://blogs.msdn.com/b/sdl/archive/2012/10/09/necessary-explained-actionable-and-tested-neat-cards.aspx.

237.      SeaMonster. “Security Modeling Software,” SourceForge, last updated May 7, 2013, http://sourceforge.net/projects/seamonster/.

238.      Securosis, Mike Rothman. “The CISO's Guide to Advanced Attackers: Sizing Up the Adversary [New Series],” Securosis blog, April 16, 2013, https://securosis.com/blog/the-cisos-guide-to-advanced-attackers-sizing-up-the-adversary.

239.      Shachtman, Noah. “Insiders Doubt 2008 Pentagon Hack Was Foreign Spy Attack,” Wired online, August 25, 2010, http://www.wired.com/dangerroom/2010/08/insiders-doubt-2008-pentagon-hack-was-foreign-spy-attack/.

240.      Shachtman, Noah, and David Axe. “Most U.S. Drones Openly Broadcast Secret Video Feeds,” Wired online, October 29, 2012, http://www.wired.com/dangerroom/2012/10/hack-proof-drone/.

241.      Shamir, Adi, and Eran Tromer. “Acoustic Cryptanalysis: On Nosy People and Noisy Machines,” last accessed on October 16, 2013, http://tau.ac.il/˜tromer/acoustic/.

242.      Shane, Scott. “A Spy's Motivation: For Love of Another Country,” The New York Times, April 20, 2008, http://www.nytimes.com/2008/04/20/weekinreview/20shane.html.

243.      Shostack, Adam. “Adding Usable Security to the SDL,” 2011, Microsoft Developer Network, http://blogs.msdn.com/b/sdl/archive/2011/05/04/adding-usable-security-to-the-sdl.aspx and http://blogs.msdn.com/b/sdl/archive/2012/10/09/necessary-explained-actionable-and-tested-neat-cards.aspx.

244.      _____. “Buffer Overflows and History: A Request” (including comments), Emergent Chaos, October 20, 2008, http://emergentchaos.com/archives/2008/10/buffer-overflows-and-history-a-request.html.

245.      _____. “Elevation of Privilege,” Microsoft Security Development Lifecycle, February 7, 2013, http://www.microsoft.com/security/sdl/adopt/eop.aspx and http://www.homeport.org/˜adam/Elevation-of-Privilege-BlackHat2010ShostackFinal.pptx.

246.      _____. “Elevation of Privilege: Drawing Developers into Threat Modeling,” white paper, December, 2012, http://blogs.msdn.com/b/sdl/archive/2012/12/18/elevation-of-privilege-drawing-developers-into-threat-modeling.aspx.

247.      _____. “Engineers Are People, Too.” Keynote at Software and Usable Security Aligned for Good Engineering (SAUSAGE) Workshop, reported in “DRAFT Report on the NIST Workshop - I3P” August 2011, http://www.thei3p.org/docs/publications/436.pdf (pg. 24); slides available at http://www.homeport.org/˜adam/Engineers-are-people-too-SAUSAGE.pptx.

248.      _____. “Google+ Failed Because of Real Names,” Emergent Chaos, January 25, 2012, http://emergentchaos.com/archives/2012/01/google-failed-because-of-real-names.html.

249.      _____. “Helping Engineers Design NEAT Security Warnings,” Microsoft Security Development Lifecycle, May 4, 2011, http://blogs.msdn.com/bsdl/archive/2011/05/04/adding-usable-security-to-the-sdl.aspx and http://www.microsoft.com/en-us/download/details.aspx?id=34958.

250.      _____. “Think Like an Attacker?” Emergent Chaos, September 17, 2008, http://emergentchaos.com/archives/2008/09/think-like-an-attacker.html.

251.      _____. “The Discipline of ‘Think Like an Attacker’,” Emergent Chaos, September 22, 2008, http://emergentchaos.com/archives/2008/09/the-discipline-of-think-like-an-attacker.html.

252.      Shostack, Adam, and Danny Dhillon. “Threat Modeling: Lessons Learned and Practical Ways to Improve Your Software,” RSA, March 4, 2010.

253.      Shostack, Adam, and Andrew Stewart. The new school of information security. (Boston: Addison Wesley, 2009).

254.      Shostack, Adam, and Paul Syverson. “What Price Privacy?” (2003), http://citeseerx.ist.psu.edu/viewdoc/download?rep=rep1&type=pdf&doi=10.1.1.144.8657.

255.      Simidchieva, Borislava. “Yolo County Election Process Model and Fault Tree Analysis,” Laser Library, June 9, 2010, https://collab.cs.umass.edu/wiki/pages/T2i15688y/Yolo_County_Election_Process_Model_and_Fault_Tree_Analysis.html.

256.      Simidchieva, B. I., Engle, S. J., Clifford, M., Jones, A. C., Allen, B., Peisert, S., Bishop, M., et al. (2010). “Modeling and Analyzing Faults to Improve Election Process Robustness,” 2010 Electronic Voting Technology Workshop/Workshop on Trustworthy Elections, Washington, D.C. Retrieved from http://www.usenix.org/events/evtwote10/tech/full_papers/Simidchieva.pdf.

257.      Social Security Administration. “Hearing on Identity Theft and Tax Fraud,” May 8, 2012, http://oig.ssa.gov/newsroom/congressional-testimony/hearing-identity-theft-and-tax-fraud.

258.      _____. “New Numbers for Domestic Violence Victims,” SSA Publication 05–10093, ICN 468615, August 2011, http://www.ssa.gov/pubs/10093.html.

259.      Solove, Daniel J. Understanding Privacy, (Cambridge: Harvard University Press, 2008).

260.      Sportsman, Nathan. “Threat Modeling,” Praetorian presentation, 2011, http://www.praetorian.com/downloads/presentations/Praetorian_Threat_Modeling_Presentation.pdf.

261.      Stack Overflow. “Using a regular expression to validate an email address,” Stack Overflow, last accessed June 21, 2013, http://stackoverflow.com/questions/201323/using-a-regular-expression-to-validate-an-email-address.

262.      Stajano, Frank, and Paul Wilson. “Understanding Scam Victims: Seven Principles for Systems Security,” Communications of the ACM, March 2011, vol. 54, no. 3.

263.      Star, Susan Leigh, and James R. Griesemer. “Institutional Ecology, Translations and Boundary Objects: Amateurs and Professionals in Berkeley's Museum of Vertebrate Zoology, 1907–39.” Social Studies of Science 19, no. 3 (1989): 387–420.

264.      Stevens, James F., Richard A. Caralli, and Bradford J. Willke. “Information Asset Profiling,” Technical Note CMU/SEI-2005-TN-021. Carnegie-Mellon University, Pittsburgh, PA Software Engineering, 2005.

265.      Sweeney, Latanya. “k-anonymity: A model for protecting privacy,” International Journal of Uncertainty, Fuzziness and Knowledge-Based Systems 10, no. 05 (2002): 557–570.

266.      Swiderski, Frank. “Threat Modeling Tool Revealed,” Channel 9, July 9, 2004, last accessed October 17, 2013, http://channel9.msdn.com/Blogs/TheChannel9Team/Frank-Swiderski-Threat-Modeling-Tool-revealed.

267.      Swiderski, Frank, and Window Snyder. Threat Modeling (Redmond: Microsoft Press, 2004).

268.      Swire, Peter. “A model for When Disclosure Helps Security: What Is Different About Computer and Network Security?” Journal on Telecommunications and High Technology Law 2 (2004).

269.      Swire, Peter, and Casandra Q. Butts. “Addressing the Challenges of Identification and Authentication in American Society,” Center for American Progress, June 2, 2008, http://www.americanprogress.org/issues/civil-liberties/report/2008/06/02/4520/the-id-divide/.

270.      Sydney Morning Herald. “Woman Fools Japan's Airport Security Fingerprint System,” The Sydney Morning Herald, January 2, 2009, http://www.smh.com.au/travel/woman-fools-japans-airport-security-fingerprint-system-20090102-78rv.html.

271.      Syverson, Paul. “Sleeping Dogs Lie in a Bed of Onions But Wake When Mixed,” Fourth Hot Topics in Privacy Enhancing Technologies (HotPETs 2011), http://petsymposium.org/2011/program.php.

272.      TASM Toolset. “Specification, Simulation, and Formal Verification of Real-Time Systems,” ACM Digital Library, 2007, http://dl.acm.org/citation.cfm?id=1770371.

273.      Thorsheim, Per. “Why History May Be Bad for You,” Security Nirvana, November 26, 2009, http://securitynirvana.blogspot.com/2009/11/why-history-may-be-bad-for-you.html.

274.      ThreatModeler. “Getting Started with ThreatModeler,” “Quick Start Guide,” and “Data Sheet,” MyAppSecurity, 2013, http://myappsecurity.com/threatmodeler/threatmodeler-resources/.

275.      Torr, Peter. “Guerrilla Threat Modelling (or ‘Threat Modeling’ if you're American),” Microsoft Developer Network, February 22, 2005, http://blogs.msdn.com/b/ptorr/archive/2005/02/22/guerillathreatmodelling.aspx.

276.      Towle, Holly K. “Personal Data as Toxic Waste: A Data Protection Conundrum.” Privacy and Data Security Law Journal, June, 2009

277.      Trike. “Trike Tools,” Octotrike, last accessed October 17, 2013, http://octotrike.org/tools.shtml.

278.      Ur, B. P.G. Kelley, S. Komanduri, J. Lee, M. Maass, M. Mazurek, T. Passaro, R. Shay, T. Vidas, L. Bauer, N. Christin, and L.F. Cranor. “How does your password measure up? The effect of strength meters on password creation.” USENIX Security 2012.

279.      US-CERT. “Risks of Using the Intelligent Platform Management Interface,” US-CERT Alert TA13-207A, July 26, 2013, http://www.us-cert.gov/ncas/alerts/TA13-207A.

280.      _____. “State-Based Firewalls Fail to Effectively Manage Session Table Resource Exhaustion,” CERT Vulnerability Note VU#539363, October 15, 2002, last revised January 6, 2003, http://www.kb.cert.org/vuls/id/539363.

281.      Van Dijk, Marten, Ari Juels, Alina Oprea, and Ronald L. Rivest. “FlipIt: The Game of ‘Stealthy Takeover’,” Journal of Cryptology (2012): 1–59.

282.      Van Duyne, Douglas K., James A. Landay, and Jason I. Hong. The Design of Sites: Patterns for Creating Winning Web Sites (Boston: Pearson, 2007).

283.      VeriSign. “VeriSign® NetDiscovery Lawful Intercept Compliance Solutions,” White paper 00017651, November 28, 2007, http://www.verisign.com/static/001927.pdf.

284.      Verizon. “2013 Data Breach Investigations Report,” Verizon, 2013, http://www.verizonenterprise.com/DBIR/2013/.

285.      Visual Paradigm. “Data Flow Diagram,” VisualParadigm.com, December 4, 2006, http://www.visual-paradigm.com/highlight/highlightdfd.jsp.

286.      Von Neumann, John. “Various techniques used in connection with random digits,” Applied Math Series 12, no. 36–38 (1951): 1.

287.      Ware, Willis H. “Records, Computers and the Rights of Citizens,” No. P-5077. Rand, 1973. http://epic.org/privacy/hew1973report/.

288.      Wells, Joseph, Corporate Fraud Handbook. 3rd Edition (Indianapolis: Wiley, 2011).

289.      White, Dominic. “Corporate Threat Modeler,” SensePost, update 2010, http://www.sensepost.com/labs/tools/management/ctm/.

290.      _____. “Threat Modeling Workshop,” SensePost, update 2010, http://www.sensepost.com/cms/resources/labs/tools/management/ctm/ThreatModelingWorkshop-ITWebSummit2010.zip.

291.      Whitehouse, Ollie. “Real World Application Threat Modeling By Example,” 44Con 2013.

292.      Whitten, Alma, and J. Doug Tygar. “Why Johnny Can't Encrypt: A Usability Evaluation of PGP 5.0,” In Proceedings of the 8th USENIX Security Symposium, 1999.

293.      Wikipedia. “Battle of Midway: Allied Code-Breaking,” Wikipedia.com, last modified October 7, 2013, http://en.wikipedia.org/wiki/Battle_of_Midway#Allied_code-breaking.

294.      _____. “Birthday Problem,” Wikipedia.com, last modified October 1, 2013, http://en.wikipedia.org/wiki/Birthday_problem.

295.      _____. “Data Encryption Standard,” Wikipedia.com, last modified October 5, 2013, http://en.wikipedia.org/wiki/Data_Encryption_Standard.

296.      _____. “Evaluation Assurance Level,” Wikipedia.com, October 11, 2013, http://en.wikipedia.org/wiki/Evaluation_Assurance_Level.

297.      _____. “GOMS (Goals, Operators, Methods, and Selection rules),” Wikipedia.com, last updated August 7, 2013, http://en.wikipedia.org/wiki/GOMS.

298.      _____. “Kerkhoffs Principle,” Wikipedia.com, last update October 12, 2013, http://en.wikipedia.org/wiki/Kerckhoffs%27s_principle.

299.      _____. “Responsibility Assignment Matrix (RAM),” Wikipedia.com, last modified October 15, 2013, http://en.wikipedia.org/wiki/Responsibility_assignment_matrix.

300.      _____. “Syn Flood,” Wikipedia.com, last modified September 16, 2013, http://en.wikipedia.org/wiki/SYN_flood.

301.      Williams, Laurie, Michael Gegick, and Andrew Meneely. “Protection Poker: Structuring Software Security Risk Assessment and Knowledge Transfer,” In Engineering Secure Software and Systems, pp. 122–34. (Berlin: Springer, 2009).

302.      “Windows 8 Integration,” Mozilla Wiki, last modified on July 29, 2012, https://wiki.mozilla.org/Windows_8_Integration.

303.      Yanisac, Alex, Harold Purdue, and Jeff Landry. Personal communication, 2012.

304.      Young, Rupert. “How Often Do Users Reset or Delete Their Cookies?”; comment on thread, http://www.quora.com/How-often-do-users-reset-or-delete-their-cookies, Jan 26, 2011.

305.      Yu, Persis S., and Shanon M. Dietrich. “Broken Records: How errors by criminal background checking companies harm workers and businesses,” April 2012, available at http://www.nclc.org/issues/broken-records.html.

306.      Zalewski, Michal. “Add a Security Delay to the Main Action of Popup Notifications (Bug #583175),” Bug report and discussion, July 29, 2010, https://bugzilla.mozilla.org/show_bug.cgi?id=583175.

307.      _____. The Tangled Web: A Guide to Securing Modern Web Applications (San Francisco: No Starch Press, 2011).

308.      Zhang, Yinqian, Fabian Monrose, and Michael K. Reiter. “The Security of Modern Password Expiration: An Algorithmic Framework and Empirical Analysis,” Proceedings of the Seventeenth ACM Conference on Computer and communications security, pp. 176–86 (ACM, 2010).

309.      Zooko. “Names: Decentralized, Secure, Human-Meaningful: Choose Two,” Zooko.com, last updated January 30, 2006, http://web.archive.org/web/20120125033658/http://zooko.com/distnames.html.