ForAllSecure

SEPTEMBER 2, 2021

I recently spoke to Gartner on the addition of fuzz testing to their Critical Capabilities for the Application Security Testing Magic Quadrant. He has led security engineering and product security programs at organizations with the most advanced fuzz testing programs, such as Google and Microsoft. This is key.

SDLC 52

SDLC Programming Applications Security 52

ForAllSecure

JULY 27, 2021

Security needs to be part of the development experience. This has given rise to the application security space. These include static analysis software testing and penetration testing and it assumes that security is binary. You are either secure or insecure, there is no grey area. invalid set of inputs.

Security 52

Security Applications Development SDLC 52

ForAllSecure

JANUARY 19, 2023

I was recently challenged to come up with the best methods you can use in 2023 to make the systems you're developing more secure. I realized it boils down to one thing, and it’s what all the highest performing companies are already doing: automating offense as part of your defensive security program.

Security 40

Security SDLC Strategy Open Source 40

ForAllSecure

SEPTEMBER 29, 2020

I'm just always curious how sensors transduce the analog into the digital and from my experience in computer security I know most failures happens at the boundaries between abstractions where there's undefined behavior. The transition from one system to another has always been one of the weakest links in the security chain.

Research 52

Research Engineering Examples System 52

ForAllSecure

SEPTEMBER 29, 2020

I'm just always curious how sensors transduce the analog into the digital and from my experience in computer security I know most failures happens at the boundaries between abstractions where there's undefined behavior. The transition from one system to another has always been one of the weakest links in the security chain.

Research 52

Research Engineering Examples System 52

ForAllSecure

SEPTEMBER 28, 2020

I'm just always curious how sensors transduce the analog into the digital and from my experience in computer security I know most failures happens at the boundaries between abstractions where there's undefined behavior. The transition from one system to another has always been one of the weakest links in the security chain.

Research 52

Research Engineering Examples System 52