STRIDE, CIA and the Modern Adversary

The modern adversary isn’t a script kiddie. She/he is a sophisticated professional hired by a nation state or criminal organization. Her organization will have done an ROI (Return on Investment) calculation to justify the cost of a targeted attack against a specific entity. This adversary also doesn’t attack linearly against the traditional network based defenses…. Read more

Extending WCF for Legacy Protocol Support

I recently had a customer with the following project. A new software system is being build based on a SOA approach. Unfortunately, at least one client is a legacy mainframe socket application with a positional message format. The traditional approach for this problem is to write custom threading and socket code. This often leads to… Read more