Adam Shostack -- Fast, cheap and good threat models
The Application Security Podcast
00:00
The Value of Getting Started
When you're thinking cheap, are you thinking from a resources in time, aplocation perspective, equating to dollars? And so it's cheap not because it doesn't have value. It's cheap cause there's not a lot of effort that has to be put in to do it. Fast is the toughest one out of these three, fast than cheap. But if all o that becomes heavyw that we never start, and we miss out on any of the value that we aspire to. I can very easily say, ok, well, we can, you know, do it in a mini minimum amount of time,. but good? How do we measure good in this equation? So
Transcript
Play full episode
