Security Wire Weekly » Secure coding

Citigroup breach: It’s about Web security

Jessica Scarpati — Tue, 21 Jun 2011 21:12:41 +0000

Jeremiah Grossman of WhiteHat Security explains that the Citigroup breach was the result of a simple business logic flaw which should have been caught in the code review process.

The Microsoft SDL

Jessica Scarpati — Thu, 21 Apr 2011 16:48:13 +0000

David Ladd of Microsoft’s software security engineering team talks about the SDL and how it can be applied to improve the security of your software development processes. This podcast is part of our special “Eye On Secure Software Development” package which examines secure coding trends and strategies.

Wysopal on software security and threat modeling

Jessica Scarpati — Thu, 21 Apr 2011 13:23:56 +0000

Chris Wysopal, co-founder and CTO of Veracode talks about the evolution of secure software development and the road ahead. Wysopal says threat modeling is the next step. Editor’s note: This podcast is part of our special series, “Eye On Secure Software Development” which examines secure coding in the month of April.

Breach highlights secure coding needs

Jessica Scarpati — Wed, 19 Aug 2009 20:43:05 +0000

Jim Molini, a Microsoft security professional and longtime security expert explains his work as the key architect of a new secure software certification. Also, Forrester Research analyst Rob Whiteley talks about weighing risks versus attempting to secure all data.