# Review: Practical Cybersecurity Architecture

DevFeed: [Review: Practical Cybersecurity Architecture](<https://devfeed.tech/articles/review-practical-cybersecurity-architecture-36957.md>)

Original publisher: [Read original article](<https://shostack.org/blog/review-practical-cybersecurity-architecture/>)

Author: Adam

Published: 2021-05-26T00:00:00Z

Content type: opinion

Language: en

Sources: [Shostack & Friends Blog](<https://devfeed.tech/sources/shostack-friends-blog.md>)

Topics: [Architecture & Design](<https://devfeed.tech/topics/architecture-design.md>), [Application Security](<https://devfeed.tech/topics/application-security.md>), [risk-management](<https://devfeed.tech/topics/risk-management.md>)

Tags: [analysis](<https://devfeed.tech/tags/analysis.md>), [application-security](<https://devfeed.tech/tags/application-security.md>), [architecture](<https://devfeed.tech/tags/architecture.md>), [practical](<https://devfeed.tech/tags/practical.md>), [review](<https://devfeed.tech/tags/review.md>), [risk](<https://devfeed.tech/tags/risk.md>), [risk-management](<https://devfeed.tech/tags/risk-management.md>)

## AI overview

Adam Shostack reviews Practical Security Architecture by Diana Kelley and Ed Moyle, praising its concise, practical, customer-focused approach to security architecture. He also discusses its treatment of application security, risk management, and threat modeling, including his view that likelihood can often be simplified when analyzing public-facing applications.

## Source excerpt

Adam Shostack's review of the book Practical Cybersecurity Architecture