Surviving the Pan-decade: 🤬
I hope that all of you who read this - and all those you care for - live long, fulfilling lives. I fear that many will not live to see 2030, and those who do are increasingly likely to endure a pai...
securing.dev
DevSecOps Essentials: Talent
TL;DR / Summary at the end of the post. The information shared in this series is the distilled knowledge gained from my experience building the DevSecOps program at Thermo Fisher Scientific (a glob...
DevSecOps Essentials: Manual Testing
TL;DR / Summary at the end of the post. The information shared in this series is the distilled knowledge gained from my experience building the DevSecOps program at Thermo Fisher Scientific (a glob...
DevSecOps Essentials: Dynamic Testing
TL;DR / Summary at the end of the post. The information shared in this series is the distilled knowledge gained from my experience building the DevSecOps program at Thermo Fisher Scientific (a glob...
DevSecOps Essentials: Mitigations
TL;DR / Summary at the end of the post. The information shared in this series is the distilled knowledge gained from my experience building the DevSecOps program at Thermo Fisher Scientific (a glob...
DevSecOps Essentials: Code Security
TL;DR / Summary at the end of the post. The information shared in this series is the distilled knowledge gained from my experience building the DevSecOps program at Thermo Fisher Scientific (a glob...
DevSecOps Essentials: Software Asset Management
TL;DR / Summary at the end of the post. The information shared in this series is the distilled knowledge gained from my experience building the DevSecOps program at Thermo Fisher Scientific - a For...
DevSecOps Essentials: An Overview
TL;DR / Summary at the end of the post. The information shared in this series is the distilled knowledge gained from my experience building the DevSecOps program at Thermo Fisher Scientific (a glob...
Security is a Feature
TL;DR / Summary at the end of the post. The greatest challenge in any Application Security or DevSecOps program is driving remediation of vulnerabilities found in the software our companies writ...
Static Analysis: Local vs. Remote Sources
TL;DR / Summary at the end of the post. Full Disclosure up-front: I am employed as a Code Scanning Architect at GitHub at the time I published this article. In Part 1 of this series I made refe...