Security is a Feature
TL;DR / Summary at the end of the post. The greatest challenge in any Application Security or DevSecOps program is driving remediation of vulnerabilities found in the software our companies writ...
securing.dev
Static Analysis: Local vs. Remote Sources
TL;DR / Summary at the end of the post. Full Disclosure up-front: I am employed as a Code Scanning Architect at GitHub at the time I published this article. In Part 1 of this series I made refe...
Comprehensive Static Analysis: Accuracy, Speed, or Completeness
TL;DR / Summary at the end of the post. Full Disclosure up-front: I am employed as a Code Scanning Architect at GitHub at the time I published this article. As in my previous posts on Static Co...
Binary Static Analysis: Accuracy, Speed, or Completeness
TL;DR / Summary at the end of the post. Full Disclosure up-front: I am employed as a Code Scanning Architect at GitHub at the time I published this article. As in my previous post on Static Cod...
Static Code Analysis: Accuracy, Speed, or Completeness
TL;DR / Summary at the end of the post. Full Disclosure up-front: I am employed as a Code Scanning Architect at GitHub at the time I published this article. In Part 1 of this series I discussed ...
The 3 types of Static Analysis
TL;DR (with a link to the official Ted Lasso biscuit recipe at the end) Full disclosure up-front: I am employed as a Code Scanning Architect at GitHub at the time of publishing this post. It ha...
Inspirations in Security
Over the past 3 years, I’ve been doing a lot of thinking about how much value there is in maintaining an online persona - of maintaining one’s presence amongst the cacophony of voices talking, twee...