Collaborate Disseminate
Several recent cyber attacks have successfully targeted organizations that should be poster children for security hygiene. Why are even the most security-conscious organizations being compromised, and what does it mean for everyone else?
read more
… Continue reading What Happens When Security Companies Fail at Security?
We have collectively heard the saying, “where there is smoke, there is fire” throughout our lives. And, sure enough, it is true far more often than it is false. I have been seeing a lot of smoke lately, so I suspect that there is an interesting fire burning.
Continue reading IoT Security: Where There is Smoke, There is Fire
1. Shift Left.
2. Test earlier in the development cycle.
read more
Continue reading How to Reduce Risk While Saving on the Cost of Resolving Security Defects
Worrisome Chicken Little or savvy observer of truth?
read more
I recently had reason to spend an overnight visit in the hospital. When friends and family left me late in the evening I was confronted with a subject that I had considered professionally but never had to face personally: the connected medical device. … Continue reading Sobering Thoughts When a Connected Medical Device Is Connected to You
Quality and security. Two words that share an interesting relationship and no small amount of confusion.
read more
Continue reading Security vs. Quality: What’s the Difference?
The prediction business is a tricky thing. You can be right, but until you are proven right, you’re either early or wrong. Being early feels just like being wrong—up until the moment you are right.
Continue reading The Connected Toy Conundrum Is Beginning to Boil
For far too long software security has been comprised of a curious bifurcation of roles. Developers develop and IT security testers test for security issues. Fortunately, a confluence of circumstances has forced a recalibration of the developer’s role in software security. In fact, I think we are about to see a new wave of what I call developer enablement.
Continue reading Moving Beyond “Moving Left”: The Case for Developer Enablement
It is my humble opinion that we have allowed our daily rush into an increasingly digital world to negatively affect our ability to address challenges. We look at the world in the sharp, square and discreet lens of digital and ignore the smooth and cont… Continue reading The Application Security Testing Conundrum
The beginning of any new year is a time for examination and setting new goals and objectives. Many of you understand that addressing the vulnerabilities in your software is something you can no longer ignore, and are ready to get serious about software… Continue reading Make a New Year’s Resolution to Get Serious About Software Security