Adam Shostack is recognized as a leading expert in threat modeling and secure by design. He is the President of Shostack + Associates, where he provides training, consulting, and expert witness services. His work focuses on improving security outcomes for customers and the industry, including his contributions to creating the CVE and fixing autorun. He is also an Affiliate Professor at the University of Washington.