Writing
Research and field notes
Deep dives, threat analysis, and notes from the work - mostly on AI and agent security, sometimes on whatever is breaking this week.
Latest
Using C4 Diagrams In Security Work
Follow a customer attachment from the browser to storage, using C4 to locate the ownership check and the paths that might bypass it.
June 15, 20214 min readArchitecture
Read article
May 20, 20214 min read
4+1 Architecture Views For Security Reviews
A refund times out and two workers may retry it. Follow the same operation through the logical, code, runtime, and deployment views.
4+1 ArchitectureKruchtenSystem Architecture