Author: Adam Shostack, Technical Advisor to IriusRisk