Anurag Agarwals' Threat Modeling Blog

After a summer of high profile attacks on encryption including password, credit card and private user information exposure, new attacks on S...

After speaking with a lot of developers we realized they are looking for a fun, quick way to enhance their knowledge about the secure cod...

We had recently developed a quiz to help an organization test their developer's knowledge of OWASP top 10. I thought it would be a good...

We are starting an OWASP threat modeling project to standardize a threat modeling approach which can be used by various companies. During th...

I am pleased to announce Intellipass (a behavior based password lockout mechanism). Most of the password lockout mechanism today are static,...

Ever wondered how a hacker hacks all these credit cards? Do you think hacking a website is difficult? What are the skills required to hack ...

As some of you know that I joined WhiteHat Security as a Director of Education Services since Dec 2007 to build their training division from...