# A roundup of articles and papers on risk management, security automation, SDL, and threat modeling

DevFeed: [A roundup of articles and papers on risk management, security automation, SDL, and threat modeling](<https://devfeed.tech/articles/interesting-reads-risk-automation-lessons-and-more-36843.md>)

Original publisher: [Read original article](<https://shostack.org/blog/interesting-reads-2/>)

Author: Adam

Published: 2019-10-15T00:00:00Z

Content type: article

Language: en

Sources: [Shostack & Friends Blog](<https://devfeed.tech/sources/shostack-friends-blog.md>)

Topics: [risk-management](<https://devfeed.tech/topics/risk-management.md>), [Security](<https://devfeed.tech/topics/security.md>), [Automation](<https://devfeed.tech/topics/automation.md>)

Tags: [academics](<https://devfeed.tech/tags/academics.md>), [automation](<https://devfeed.tech/tags/automation.md>), [devices](<https://devfeed.tech/tags/devices.md>), [governance](<https://devfeed.tech/tags/governance.md>), [paper](<https://devfeed.tech/tags/paper.md>), [risk](<https://devfeed.tech/tags/risk.md>), [risk-management](<https://devfeed.tech/tags/risk-management.md>), [sdl](<https://devfeed.tech/tags/sdl.md>), [security](<https://devfeed.tech/tags/security.md>)

## AI overview

This blog post highlights several readings on cybersecurity, including a risk management and governance knowledge area, automated security design flaw detection, lessons from 15 years of SDL, and threat modeling for devices.

## Source excerpt

Just what the title says.