June 2007 - Posts
Hi, Michael Howard here (again). Before I get started on this post, I want to set some expectations. My plan is to blog occasionally about our root cause analyses, but I will not blog about every vulnerability we fix simply because I don't have the time;
Read More...
Hi, Michael here. A few weeks ago, my boss, Steve Lipner placed a copy of eWeek on my desk opened to an article entitled, “Java Security Traps Getting Worse.” In summary, the article, which is also available online ( http://www.eweek.com/article2/0,1895,2128071,00.asp
Read More...
Hi – Dave here. If you have read Michael Howard’s blog for a while, you may recall that our team held a two-and-a-half day SDL training session back in November for fifty senior engineers from a number of the hardware OEMs and some of their component
Read More...
Rob Roberts here. Software test engineers have a lot of things to consider when testing their products: performance, security, accessibility, reliability, usability, and a whole bunch of other “-ilities.” And now to address our increasingly interconnected
Read More...