Simone Curzi

WORK HISTORY

EDUCATION

SKILLS

ABOUT SIMONE CURZI

I have been working in Microsoft Services for more than 24 years. For the last 15 years, I have worked mostly on Secure Architecture, Application Security, and Threat Modeling. Application Security is my main area of interest, even before joining Microsoft: the very reason why I have been hired by Microsoft is a set of articles I have written on Security and specifically on Cryptography between the years 1998 and I am a frequent speaker at events and webinars. As such, I have presented at events organized by Microsoft,(ISC)2, OWASP, Threat Modeling Connect and others. For 5 years I have led the Microsoft Worldwide Community for Application Security. In the last years, I\'ve contributed to the evolution of Threat Modeling, with a couple of tools for Threat Modeling, including the Open Source Threats Manager Studio, a blog on the topic (https://simoneonsecurity.com) and a paper on Evolving Threat Modeling, which can be found in https://bit.ly/evolvetm. The paper has been featured at various events, including the (ISC)2 Security Congress, Security Compass\'s Equilibrium Conference, and a SAFECode internal event. I\'ve co-authored a book on Designing and Developing Secure Solutions on Azure, with Michael Howard and Heinrich Gantenbein. See: https://azsec.tech/get. I\'m currently leading an Open Group initiative on extending Threat Modeling with Open FAIR. A report in the form of a series of 4 blog posts has been published by the Open Group in https://aka.ms/tm-openfair.