October 2009 - Posts
Cory at Matasano has a new blog post explaining “Ninja threat modeling.” Ninja threat modeling is Matasano’s approach to threat modeling as part of a penetration test. I’m really happy that they’ve given their approach a name. A few years back, we would
Read More...
10/20/2009: Updated with correct CVE - thanks to Matthieu Suiche for pointing this out to me. Hi, Michael here. When I wrote the first analysis of why the SDL had missed a security vulnerability, I made a comment that I would continue to write these posts,
Read More...
Hi everyone, Bryan here. Peleus Uhley, Senior Security Researcher at Adobe, has written a guest post for the BlueHat blog on potential security issues with cross-domain access permissions for web sites. I’d like to encourage you to read Peleus’ post and
Read More...
Hi everyone, this is Eleanor Saitta with iSEC Partners , with a brief post about return on investment and structured security. A few weeks ago, Microsoft and iSEC Partners published a joint whitepaper titled, “Microsoft SDL: Return On Investment”, and
Read More...
