December 2007 - Posts
Hi all, Eric Bidstrup here. One of the areas that our group is also involved is in industry standards regarding security assurance, and Common Criteria ( aka ISO 15408) is the standard internationally recognized by 24 governments (including the US, UK,
Read More...
Hi, Michael here. I'm always asked "How can you claim the SDL is working when Microsoft still issues security updates?" So I want to make sure people understand the goals of the SDL and perhaps more importantly, the non-goals. There are three major security-related
Read More...
James Whittaker here. At the International Symposium on Software Reliability Engineering (ISSRE 07, Trollhattan Sweden) one would think that the security versus reliability debate would be very one-sided. After all, reliability is the attendees’ mainstay
Read More...