Nice article over on MSDN here.
Archive for the ‘OWASP’ category
Team Foundation Server (TFS) and the Open Web Application Security Project (OWASP) Top Ten
November 21, 2008OWASP CISO Panel
October 20, 2008I didn’t go to OWASP NYC (put off by the vulnerability circus to be brutally honest) but I just watched the CISO panel and it’s just fantastic to see a panel of CISO’s discussing really important application security topics. Jim Routh ‘…..view application security as a supply chain management problem’. Very wise! ‘Static analysis tools [...]
Microsoft Joins OWASP
October 12, 2008If you navigate over to the OWASP members page you will see a new logo It’s an interesting full circle for me having started OWASP back in 2001 and now having had a hand in one of the biggest technology companies in the world (my current employer) joining. Someone sent me a mail on Friday [...]
Checklists Are Not For Dummies, Dummy!
May 24, 2008At the OWASP Conference in Belgium this week I had a slide about checklists. This is the story behind the slide. My boss at Microsoft has a friend who is a pilot. He did his pre-take-off checklist and was cleared to taxi onto the runway by air traffic control. He consulted his checklist one more [...]
Presenting Security Ideas or Driving Agendas?
May 24, 2008I opened the OWASP Europe Conference this week with a slide (below) about vendor neutrality. In essence I urged attendees to consider the motivations of those presenting various ideas at the conference; including myself of course. During the conference it was pointed out that the moderator of a panel “The PCI 6.6 Dogfight – to [...]
Farewell Security Buddha – Hello Curphey 2.0
March 5, 2010I openly admit I had a mis-spent youth. I was expelled from school and then went on a rampage of sex, drugs, booze and rock and roll for the best part of a decade. I lived hand to mouth and did everything from stacking yogurts in a yogurt factory (working nights), selling houses, working behind [...]
Categories: Beautiful Security, Careers, Getting Things Done, Long Tail Security, Microsoft, OWASP, Productivity, Security Blogs, Security Book Reviews, Security Bullshit, Security Industry, Software Development, Software Security, Speaking, Technology Commentary, Travel, UX, Working at Microsoft, information security, open source
Comments: 9 Comments