ForAllSecure

SEPTEMBER 2, 2021

I recently spoke to Gartner on the addition of fuzz testing to their Critical Capabilities for the Application Security Testing Magic Quadrant. Once fuzzing is strategically implemented within developer processes and it's tailored to the product under test, everything just happens. They’re just too valuable.

SDLC 52

SDLC Programming Applications Security 52

ForAllSecure

JUNE 23, 2020

While there have been a lot of successes (such as adoption in the OSS community through Coverity SCAN), I’ve also seen challenges with organizations attempting to adopt SAST as part of their development process. Focus : How much developer time needs to be focused on the curation and remediation of defects?

Applications 52

Applications Security Analysis Software 52

ForAllSecure

JUNE 23, 2020

While there have been a lot of successes (such as adoption in the OSS community through Coverity SCAN), I’ve also seen challenges with organizations attempting to adopt SAST as part of their development process. Focus : How much developer time needs to be focused on the curation and remediation of defects?

Applications 40

Applications Security Analysis Software 40

ForAllSecure

JUNE 23, 2020

While there have been a lot of successes (such as adoption in the OSS community through Coverity SCAN), I’ve also seen challenges with organizations attempting to adopt SAST as part of their development process. Focus : How much developer time needs to be focused on the curation and remediation of defects?

Applications 40

Applications Security Analysis Software 40

ForAllSecure

JANUARY 19, 2023

I was recently challenged to come up with the best methods you can use in 2023 to make the systems you're developing more secure. There are three steps to this strategy: 1. High performers like Google and the Microsoft SDLC do this by continuously fuzzing their software with their own customized system.

Security 40

Security SDLC Strategy Open Source 40

Future of CIO

DECEMBER 20, 2012

Holiday season actually stimulates creativity, and spurs optimism; from one of IT performance debates: “good cheap, fast for enterprise application development, which two should CIO pick?”,--many commentators set positive tunes and think it possible to have them all. Hopefully, the "pick any two" approach is becoming obsolete.

SDLC 45

SDLC Agile Architecture Applications 45

CIO Business Intelligence

AUGUST 9, 2023

First termed in the Gartner Hype Cycle for Cloud Security, 2021, a cloud-native application protection platform (CNAPP) is, as the name implies, a platform approach for securing applications that are cloud-native across the span of the software development lifecycle (SDLC) of the applications. How did It originate?

SDLC 75

SDLC Agile Applications Cloud 75

Future of CIO

OCTOBER 26, 2013

Differentiation of the various "types" of governance * Enterprise Architecture governance deals with how the architecture is developed, managed, shared, monitored, verified, updated, version management, checked for standards compliance, etc. - Actually, it bridges the business steering instruments to the architectural frameworks/models.

Architecture 40

Architecture Government Enterprise Enterprise 40

ForAllSecure

MARCH 31, 2023

Set up a meeting with us during the conference to learn more about how Mayhem makes security testing easy for development teams. ‍ Developers and security professionals are always making trade-offs between competing priorities. Development Speed or Code Security. Register for the RSA Conference here. Why Not Both?

Meeting 52

Meeting Automotive Open Source Devops 52