2007 Archives by author

• Messages sorted by: [ thread ] [ subject ] [ date ]
• More info on this list...

Starting: Tue Jan 2 09:18:15 EST 2007
Ending: Fri Dec 21 18:01:33 EST 2007
Messages: 584

• [SC-L] Perspectives on Code Scanning   Carl Alphonce
• [SC-L] Compilers   Peter Amey
• [SC-L] Compilers   Peter Amey
• [SC-L] Tools: Evaluation Criteria   Peter Amey
• [SC-L] Tools: Evaluation Criteria   Peter Amey
• [SC-L] Tools: Evaluation Criteria   Peter Amey
• [SC-L] But what proof do we have that any of it makes a difference?   Peter Amey
• [SC-L] how far we still need to go   William L. Anderson
• [SC-L] how far we still need to go   William L. Anderson
• [SC-L] Good Magazines and Books   SC-L Subscriber Dave Aronson
• [SC-L] What defines an InfoSec Professional?   SC-L Subscriber Dave Aronson
• [SC-L] How big is the market?   SC-L Subscriber Dave Aronson
• [SC-L] Best practices for encrypting client-side data   SC-L Subscriber Dave Aronson
• [SC-L] FW: What's the next tech problem to be solved in softwaresecurity?   SC-L Subscriber Dave Aronson
• [SC-L] Perspectives on Code Scanning   SC-L Subscriber Dave Aronson
• [SC-L] What defines an InfoSec Professional?   Greg Beeley
• [SC-L] Darkreading: Secure Coding Certification   Greg Beeley
• [SC-L] Darkreading: Secure Coding Certification   Greg Beeley
• [SC-L] Darkreading: Secure Coding Certification   Greg Beeley
• [SC-L] Darkreading: Secure Coding Certification   Bennett, Jason
• [SC-L] What's the next tech problem to be solved in software   Bennett, Jason
• [SC-L] Interesting tidbit in iDefense Security Advisory   Bennett, Jason
• [SC-L] Software Security Training for Developers   Nish Bhalla
• [SC-L] Software Security Training for Developers   Nish Bhalla
• [SC-L] Dark Reading - Discovery and management - Security Startups Make Debut - Security News Analysis   Blue Boar
• [SC-L] Disclosure: vulnerability pimps? or super heroes?   Blue Boar
• [SC-L] Disclosure: vulnerability pimps? or super heroes?   Blue Boar
• [SC-L] [Full-disclosure] Chinese Professor Cracks Fifth Data Security Algorithm (SHA-1)   Blue Boar
• [SC-L] [Full-disclosure] Chinese Professor Cracks Fifth Data Security Algorithm (SHA-1)   Blue Boar
• [SC-L] [Full-disclosure] Chinese Professor Cracks Fifth Data Security Algorithm (SHA-1)   Blue Boar
• [SC-L] Best practices for encrypting client-side data   Blue Boar
• [SC-L] Harvard vs. von Neumann   Blue Boar
• [SC-L] Harvard vs. von Neumann   Blue Boar
• [SC-L] Harvard vs. von Neumann   Blue Boar
• [SC-L] how far we still need to go   Blue Boar
• [SC-L] Insecure Software Costs US $180B per Year - Application and Perimeter Security News Analysis - Dark Reading   Blue Boar
• [SC-L] DH exchange: conspiracy or ignorance?   Adam Bozanich
• [SC-L] Security Testing track: Software TestingConference:Washington DC   Mason Brown
• [SC-L] Mainframe Security   Gergely Buday
• [SC-L] Software process improvement produces secure software?   George Capehart
• [SC-L] DH exchange: conspiracy or ignorance?   Bjarne Carlsen
• [SC-L] Silverbullet: Fortify TAB   Brian Chess
• [SC-L] JavaScript Hijacking   Brian Chess
• [SC-L] JavaScript Hijacking   Brian Chess
• [SC-L] SC-L Digest, Vol 3, Issue 73   Brian Chess
• [SC-L] JavaScript Hijacking   Brian Chess
• [SC-L] Secure Programming with Static Analysis   Brian Chess
• [SC-L] Really dumb questions?   Brian Chess
• [SC-L] Disclosure: vulnerability pimps? or super heroes?   Steven M. Christey
• [SC-L] Disclosure: vulnerability pimps? or super heroes?   Steven M. Christey
• [SC-L] Disclosure: vulnerability pimps? or super heroes?   Steven M. Christey
• [SC-L] What defines an InfoSec Professional?   Steven M. Christey
• [SC-L] Information Protection Policies   Steven M. Christey
• [SC-L] Darkreading: compliance   Steven M. Christey
• [SC-L] Economics of Software Vulnerabilities   Steven M. Christey
• [SC-L] Economics of Software Vulnerabilities   Steven M. Christey
• [SC-L] Economics of Software Vulnerabilities   Steven M. Christey
• [SC-L] Economics of Software Vulnerabilities   Steven M. Christey
• [SC-L] Darkreading: Secure Coding Certification   Steven M. Christey
• [SC-L] Darkreading: Secure Coding Certification   Steven M. Christey
• [SC-L] Darkreading: Secure Coding Certification   Steven M. Christey
• [SC-L] Darkreading: Secure Coding Certification   Steven M. Christey
• [SC-L] Tools: Evaluation Criteria   Steven M. Christey
• [SC-L] Perspectives on Code Scanning   Steven M. Christey
• [SC-L] What's the next tech problem to be solved in software security?   Steven M. Christey
• [SC-L] Harvard vs. von Neumann   Steven M. Christey
• [SC-L] The Specifications of the Thing   Steven M. Christey
• [SC-L] Harvard vs. von Neumann   Steven M. Christey
• [SC-L] Interesting tidbit in iDefense Security Advisory 06.26.07   Steven M. Christey
• [SC-L] Interesting tidbit in iDefense Security Advisory 06.26.07   Steven M. Christey
• [SC-L] The Next Frontier   Steven M. Christey
• [SC-L] how far we still need to go   Steven M. Christey
• [SC-L] CWE Researcher List   Steven M. Christey
• [SC-L] Microsoft Pushes Secure, Quality Code   Steven M. Christey
• [SC-L] Microsoft Pushes Secure, Quality Code   Steven M. Christey
• [SC-L] Insecure Software Costs US $180B per Year - Application and Perimeter Security News Analysis - Dark Reading   Steven M. Christey
• [SC-L] Insecure Software Costs US $180B per Year - Application and Perimeter Security News Analysis - Dark Reading   Steven M. Christey
• [SC-L] Interesting Blog Entry on Tools Coverage   Steven M. Christey
• [SC-L] Compilers   Crispin Cowan
• [SC-L] Dark Reading - Discovery and management - Security Startups Make Debut - Security News Analysis   Crispin Cowan
• [SC-L] NDSS: Network and Distributed Systems Security   Crispin Cowan
• [SC-L] Economics of Software Vulnerabilities   Crispin Cowan
• [SC-L] Economics of Software Vulnerabilities   Crispin Cowan
• [SC-L] Economics of Software Vulnerabilities   Crispin Cowan
• [SC-L] Economics of Software Vulnerabilities   Crispin Cowan
• [SC-L] Harvard vs. von Neumann   Crispin Cowan
• [SC-L] Harvard vs. von Neumann   Crispin Cowan
• [SC-L] Harvard vs. von Neumann   Crispin Cowan
• [SC-L] Insider threats and software   Crispin Cowan
• [SC-L] NDSS 2008 CfP Papers Due September 21   Crispin Cowan
• [SC-L] OWASP Publicity   Crispin Cowan
• [SC-L] OWASP Publicity   Crispin Cowan
• [SC-L] FW: What's the next tech problem to be solvedin softwaresecurity?   David Crocker
• [SC-L] Harvard vs. von Neumann   David Crocker
• [SC-L] Harvard vs. von Neumann   David Crocker
• [SC-L] 5th IEEE International Conference on Software Engineering and Formal Methods   David Crocker
• [SC-L] Vulnerability tallies surged in 2006 | The Register   Dinis Cruz
• [SC-L] Show #21 - The One With Cruz Control ...   Dinis Cruz
• [SC-L] [WEB SECURITY] Wordpress website hacked, wordpress backdoored   Dinis Cruz
• [SC-L] Blog posts on Ideas for a Partial Trust Managed Code World   Dinis Cruz
• [SC-L] OWASP Spring of Code 2007   Dinis Cruz
• [SC-L] Darkreading: compliance   Dinis Cruz
• [SC-L] how far we still need to go   Dinis Cruz
• [SC-L] Dr.Dobb's Interview: Security, .NET, and the OWASP Project   Dinis Cruz
• [SC-L] [WEB SECURITY] Some unanswered website vulnerability questions   Dinis Cruz
• [SC-L] Foundations of Security: What Every Programmer Needs to Know   Neil Daswani
• [SC-L] statical analysis tools: language supports...   Sebastien Deleersnyder
• [SC-L] challenge: 4 hour What_Developers_Should_Know_on_Web_Application_Security   Sebastien Deleersnyder
• [SC-L] Darkreading: compliance   Bruce Ediger
• [SC-L] Secure software education. Does it start with our tools?   Dana Epp
• [SC-L] FW: Good Magazines and Books   Jeremy Epstein
• [SC-L] Catching up, and some retrospective thoughts   Jeremy Epstein
• [SC-L] Economics of Software Vulnerabilities   Arian J. Evans
• [SC-L] Catching up, and some retrospective thoughts   Arian J. Evans
• [SC-L] Darkreading: Secure Coding Certification (starting point)   Arian J. Evans
• [SC-L] Darkreading: Secure Coding Certification   Arian J. Evans
• [SC-L] Perspectives on Code Scanning   Arian J. Evans
• [SC-L] Could mandates on disclosing software effects benefit security?   Glenn and Mary Everhart
• [SC-L] Could mandates on disclosing software effects benefit   Glenn and Mary Everhart
• [SC-L] Mainframe Security   Glenn and Mary Everhart
• [SC-L] fuzzing the corporate world   Gadi Evron
• [SC-L] Dr. Dobb's | The Truth About Software Security | January 20, 2007   Gadi Evron
• [SC-L] Economics of Software Vulnerabilities   Gadi Evron
• [SC-L] Economics of Software Vulnerabilities   Gadi Evron
• [SC-L] Full Disclosure: Fuzzled - Perl fuzzing framework   Gadi Evron
• [SC-L] [fuzzing] the future of fuzzing [was: Rcov] (fwd)   Gadi Evron
• [SC-L] MetriCon 2.0 CFP   Gadi Evron
• [SC-L] State Department break-in last summer   Nick FitzGerald
• [SC-L] Microsoft Pushes Secure, Quality Code   Romain Gaucher
• [SC-L] Insecure Software Costs US $180B per Year - Application and Perimeter Security News Analysis - Dark Reading   Andre Gironda
• [SC-L] Insecure Software Costs US $180B per Year - Application and Perimeter Security News Analysis - Dark Reading   Andre Gironda
• [SC-L] Insecure Software Costs US $180B per Year - Application and Perimeter Security News Analysis - Dark Reading   Andre Gironda
• [SC-L] Insecure Software Costs US $180B per Year - Application and Perimeter Security News Analysis - Dark Reading   Andre Gironda
• [SC-L] Insecure Software Costs US $180B per Year - Application and Perimeter Security News Analysis - Dark Reading   Andre Gironda
• [SC-L] New year's resolutions   Goertzel, Karen
• [SC-L] Anyone here attending the 6th Semi-Annual Software AssuranceForum   Goertzel, Karen
• [SC-L] But what proof do we have that any of it makes a difference?   Goertzel, Karen
• [SC-L] Software process improvement produces secure software?   Goertzel, Karen
• [SC-L] differences between Threat Analysis and Threat Modeling   Jason Grembi
• [SC-L] SC-L] What defines an InfoSec Professional?   Jason Grembi
• [SC-L] SC-L Digest, Vol 3, Issue 81   Jason Grembi
• [SC-L] SC-L Digest, Vol 3, Issue 102   Jason Grembi
• [SC-L] Dr. Dobb's | The Truth About Software Security | January 20, 2007   Michael S Hines
• [SC-L] What defines an InfoSec Professional?   Michael S Hines
• [SC-L] Economics of Software Vulnerabilities   Michael S Hines
• [SC-L] FW: What's the next tech problem to be solved in softwaresecurity?   Michael S Hines
• [SC-L] What's the next tech problem to be solved in softwaresecurity?   Michael S Hines
• [SC-L] Perspectives on Code Scanning   Michael S Hines
• [SC-L] The Specifications of the Thing   Michael S Hines
• [SC-L] FW: [Dfsci] BlackHat paper on attacks against forensics software   Michael S Hines
• [SC-L] Insider threats and software   Michael S Hines
• [SC-L] Building Security In vs Auditing   Paco Hope
• [SC-L] differences between Threat Analysis and Threat Modeling   Paco Hope
• [SC-L] Interesting tidbit in iDefense Security Advisory 06.26.07   Paco Hope
• [SC-L] The Next Frontier   Paco Hope
• [SC-L] Security Testing track: Software Testing Conference: Washington DC   Paco Hope
• [SC-L] Insider threats and software   Paco Hope
• [SC-L] Software security video podcast   John Mason Jr
• [SC-L] Good Magazines and Books   KT
• [SC-L] Meeting at RSA next week?   KT
• [SC-L] JavaScript Hijacking   Frederik De Keukelaere
• [SC-L] SC-L Digest, Vol 3, Issue 73   Frederik De Keukelaere
• [SC-L] IEEE Workshop: Web 2.0 Security & Privacy   Larry Koved
• [SC-L] Reminder: IEEE Workshop: W2SP 2007: Web 2.0 Security and Privacy 2007   Larry Koved
• [SC-L] DH exchange: conspiracy or ignorance?   Kowsik
• [SC-L] DH exchange: conspiracy or ignorance?   Evgeny Lebanidze
• [SC-L] Compilers   Leichter, Jerry
• [SC-L] Compilers   Leichter, Jerry
• [SC-L] What's the next tech problem to be solved in software security?   Leichter, Jerry
• [SC-L] Interesting tidbit in iDefense Security Advisory 06.26.07   Leichter, Jerry
• [SC-L] Interesting tidbit in iDefense Security Advisory 06.26.07   Leichter, Jerry
• [SC-L] Really dumb questions?   Leichter, Jerry
• [SC-L] DH exchange: conspiracy or ignorance?   Leichter, Jerry
• [SC-L] COBOL Exploits   Leichter, Jerry
• [SC-L] OWASP Publicity   Leichter, Jerry
• [SC-L] Insecure Software Costs US $180B per Year - Application and Perimeter Security News Analysis - Dark Reading   Leichter, Jerry
• [SC-L] Insecure Software Costs US $180B per Year - Application and Perimeter Security News Analysis - Dark Reading   Leichter, Jerry
• [SC-L] What's the next tech problem to be solved in software security?   Benjamin Livshits
• [SC-L] Resources to fix vulns   McCown, Christian M
• [SC-L] Software Security Training for Developers   McCown, Christian M
• [SC-L] Building Security In vs Auditing   McGovern, James F (HTSC, IT)
• [SC-L] Compilers   McGovern, James F (HTSC, IT)
• [SC-L] Hiring Security Architects   McGovern, James F (HTSC, IT)
• [SC-L] Building Security In vs Auditing   McGovern, James F (HTSC, IT)
• [SC-L] Building Security In vs Auditing   McGovern, James F (HTSC, IT)
• [SC-L] Magazines   McGovern, James F (HTSC, IT)
• [SC-L] What defines an InfoSec Professional?   McGovern, James F (HTSC, IT)
• [SC-L] Information Protection Policies   McGovern, James F (HTSC, IT)
• [SC-L] What defines an InfoSec Professional?   McGovern, James F (HTSC, IT)
• [SC-L] Information Protection Policies   McGovern, James F (HTSC, IT)
• [SC-L] How is secure coding sold within enterprises?   McGovern, James F (HTSC, IT)
• [SC-L] How is secure coding sold within enterprises?   McGovern, James F (HTSC, IT)
• [SC-L] How is secure coding sold within enterprises?   McGovern, James F (HTSC, IT)
• [SC-L] How is secure coding sold within enterprises?   McGovern, James F (HTSC, IT)
• [SC-L] Question on User Groups   McGovern, James F (HTSC, IT)
• [SC-L] Economics of Software Vulnerabilities   McGovern, James F (HTSC, IT)
• [SC-L] Economics of Software Vulnerabilities   McGovern, James F (HTSC, IT)
• [SC-L] Economics of Software Vulnerabilities   McGovern, James F (HTSC, IT)
• [SC-L] Security Courses for Business Analysts   McGovern, James F (HTSC, IT)
• [SC-L] Darkreading: compliance   McGovern, James F (HTSC, IT)
• [SC-L] Misc Thoughts   McGovern, James F (HTSC, IT)
• [SC-L] Darkreading: compliance   McGovern, James F (HTSC, IT)
• [SC-L] Foundations of Security: What Every Programmer Needs to Know   McGovern, James F (HTSC, IT)
• [SC-L] FW: Need Sec Forum speakers-let us know by Wed. if interested   McGovern, James F (HTSC, IT)
• [SC-L] Silver Bullet: Ross Anderson   McGovern, James F (HTSC, IT)
• [SC-L] How big is the market?   McGovern, James F (HTSC, IT)
• [SC-L] How big is the market?   McGovern, James F (HTSC, IT)
• [SC-L] How big is the market?   McGovern, James F (HTSC, IT)
• [SC-L] NYC Security   McGovern, James F (HTSC, IT)
• [SC-L] Magazines   McGovern, James F (HTSC, IT)
• [SC-L] Darkreading: Secure Coding Certification   McGovern, James F (HTSC, IT)
• [SC-L] Darkreading: Secure Coding Certification   McGovern, James F (HTSC, IT)
• [SC-L] Darkreading: Secure Coding Certification   McGovern, James F (HTSC, IT)
• [SC-L] Darkreading: Secure Coding Certification   McGovern, James F (HTSC, IT)
• [SC-L] Tools: Evaluation Criteria   McGovern, James F (HTSC, IT)
• [SC-L] Tools: Evaluation Criteria   McGovern, James F (HTSC, IT)
• [SC-L] Tools: Evaluation Criteria   McGovern, James F (HTSC, IT)
• [SC-L] Perspectives on Code Scanning   McGovern, James F (HTSC, IT)
• [SC-L] Perspectives on Code Scanning   McGovern, James F (HTSC, IT)
• [SC-L] Perspectives on Code Scanning   McGovern, James F (HTSC, IT)
• [SC-L] Perspectives on Code Scanning   McGovern, James F (HTSC, IT)
• [SC-L] What's the next tech problem to be solved in softwaresecurity?   McGovern, James F (HTSC, IT)
• [SC-L] Perspectives on Code Scanning   McGovern, James F (HTSC, IT)
• [SC-L] The Next Frontier   McGovern, James F (HTSC, IT)
• [SC-L] The Next Frontier   McGovern, James F (HTSC, IT)
• [SC-L] Comparing Software Vendors   McGovern, James F (HTSC, IT)
• [SC-L] Instead of the next frontier, how about another frontier   McGovern, James F (HTSC, IT)
• [SC-L] Secure Programming with Static Analysis   McGovern, James F (HTSC, IT)
• [SC-L] Resources to fix vulns   McGovern, James F (HTSC, IT)
• [SC-L] Resources to fix vulns   McGovern, James F (HTSC, IT)
• [SC-L] Smalltalk and other Second Class Languages   McGovern, James F (HTSC, IT)
• [SC-L] Software Security Training for Developers   McGovern, James F (HTSC, IT)
• [SC-L] Software Security Training for Developers   McGovern, James F (HTSC, IT)
• [SC-L] Security Testing track: Software Testing Conference:Washington DC   McGovern, James F (HTSC, IT)
• [SC-L] how far we still need to go   McGovern, James F (HTSC, IT)
• [SC-L] Really dumb questions?   McGovern, James F (HTSC, IT)
• [SC-L] Software process improvement produces secure software?   McGovern, James F (HTSC, IT)
• [SC-L] Two Questions around Consulting on Secure Coding   McGovern, James F (HTSC, IT)
• [SC-L] Question on the importance of secure coding   McGovern, James F (HTSC, IT)
• [SC-L] IT industry creates secure coding advocacy group   McGovern, James F (HTSC, IT)
• [SC-L] Mainframe Security   McGovern, James F (HTSC, IT)
• [SC-L] OWASP Publicity   McGovern, James F (HTSC, IT)
• [SC-L] OWASP Publicity   McGovern, James F (HTSC, IT)
• [SC-L] Interesting Blog Entry on Tools Coverage   McGovern, James F (HTSC, IT)
• [SC-L] Code Coverage and Code Quality tools   McGovern, James F (HTSC, IT)
• [SC-L] Secure Coding in the Hartford CT Area   McGovern, James F (HTSC, IT)
• [SC-L] Building Security In vs Auditing   Gary McGraw
• [SC-L] Darkreading: Vista meets DRM   Gary McGraw
• [SC-L] Dark Reading - Discovery and management - Security StartupsMake Debut - Security News Analysis   Gary McGraw
• [SC-L] Silverbullet: Fortify TAB   Gary McGraw
• [SC-L] FW: Good Magazines and Books   Gary McGraw
• [SC-L] Anotated Bibliography from Software Security (take 2)   Gary McGraw
• [SC-L] Meeting at RSA next week?   Gary McGraw
• [SC-L] Silver Bullet 11: Dorothy Denning   Gary McGraw
• [SC-L] Dark Reading - Desktop Security - Here Comes the (Web)Fuzz - Security News Analysis   Gary McGraw
• [SC-L] Disclosure: vulnerability pimps? or super heroes?   Gary McGraw
• [SC-L] new blog: Justice League   Gary McGraw
• [SC-L] Disclosure: vulnerability pimps? or super heroes?   Gary McGraw
• [SC-L] Darkreading: compliance   Gary McGraw
• [SC-L] Darkreading: compliance   Gary McGraw
• [SC-L] Economics of Software Vulnerabilities   Gary McGraw
• [SC-L] Economics of Software Vulnerabilities   Gary McGraw
• [SC-L] Darkreading: compliance   Gary McGraw
• [SC-L] Information Protection Policies   Gary McGraw
• [SC-L] Silver Bullet: Becky Bace   Gary McGraw
• [SC-L] Economics of Software Vulnerabilities   Gary McGraw
• [SC-L] Darkreading: compliance   Gary McGraw
• [SC-L] Foundations of Security: What Every Programmer Needs to Know   Gary McGraw
• [SC-L] Silver Bullet: Ross Anderson   Gary McGraw
• [SC-L] How big is the market?   Gary McGraw
• [SC-L] How big is the market?   Gary McGraw
• [SC-L] Silver Bullet: Ross Anderson   Gary McGraw
• [SC-L] How big is the market?   Gary McGraw
• [SC-L] MetriCon 2.0 CFP   Gary McGraw
• [SC-L] Darkreading: Secure Coding Certification   Gary McGraw
• [SC-L] Darkreading: Secure Coding Certification   Gary McGraw
• [SC-L] FW: Darkreading: Secure Coding Certification   Gary McGraw
• [SC-L] Darkreading: Secure Coding Certification   Gary McGraw
• [SC-L] Silver Bullet: Peter Neumann   Gary McGraw
• [SC-L] JSON of Ajax -or- Little Web 2.0 bugs versus big Web 2.0 flaws: darkreading   Gary McGraw
• [SC-L] Harvard vs. von Neumann   Gary McGraw
• [SC-L] What's the next tech problem to be solved in softwaresecurity?   Gary McGraw
• [SC-L] Harvard vs. von Neumann   Gary McGraw
• [SC-L] Harvard vs. von Neumann   Gary McGraw
• [SC-L] Silver bullet: annie anton   Gary McGraw
• [SC-L] Secure Programming with Static Analysis   Gary McGraw
• [SC-L] Video: security, software, software security   Gary McGraw
• [SC-L] Foreword to Chess/West   Gary McGraw
• [SC-L] Secure Programming with Static Analysis   Gary McGraw
• [SC-L] Darkreading: software security acquisitions   Gary McGraw
• [SC-L] Exploiting Online Games + Silver Bullet + Darkreading   Gary McGraw
• [SC-L] Exploiting Online Games + Silver Bullet + Darkreading   Gary McGraw
• [SC-L] ACM CSS   Gary McGraw
• [SC-L] Insider threats and software   Gary McGraw
• [SC-L] Schneier on Assurance   Gary McGraw
• [SC-L] Insider threats and software   Gary McGraw
• [SC-L] Insider threats and software {EOG}   Gary McGraw
• [SC-L] Insider threats and software {darkreading thread}   Gary McGraw
• [SC-L] Silver Bullet: Eric Cole   Gary McGraw
• [SC-L] Software Engineering Radio   Gary McGraw
• [SC-L] IEEE S&P: Attack Trends   Gary McGraw
• [SC-L] Darkreading: cell phone insecurity   Gary McGraw
• [SC-L] silver bullet: spaf   Gary McGraw
• [SC-L] swsec story breaking   Gary McGraw
• [SC-L] Microsoft Pushes Secure, Quality Code   Gary McGraw
• [SC-L] Microsoft Pushes Secure, Quality Code   Gary McGraw
• [SC-L] Darkreading: software security and the law   Gary McGraw
• [SC-L] Software security video podcast   Gary McGraw
• [SC-L] Silver Bullet: Mikko Hypponen   Gary McGraw
• [SC-L] Hugh Thompson show   Gary McGraw
• [SC-L] "Radio" webcast on EOG/Software Security streams FRIDAY at noon EST   Gary McGraw
• [SC-L] OWASP Publicity   Gary McGraw
• [SC-L] podcast (IT Conversations)   Gary McGraw
• [SC-L] Silver Bullet 20: Markus Jakobssen   Gary McGraw
• [SC-L] darkreading: PCI, web app firewalls, and software security   Gary McGraw
• [SC-L] darkreading: PCI, web app firewalls, and software security   Gary McGraw
• [SC-L] FW: OnSecurity Podcast   Gary McGraw
• [SC-L] Silver Bullet Happy Holidays   Gary McGraw
• [SC-L] Silver Bullet Episode 21: Cigital principals   Gary McGraw
• [SC-L] New release: "OWASP TESTING GUIDE 2007"   Matteo Meucci
• [SC-L] Software Security Training for Developers   Sammy Migues
• [SC-L] Software Security Training for Developers   Sammy Migues
• [SC-L] Disclosure: vulnerability pimps? or super heroes?   Stuart Moore
• [SC-L] Dark Reading - Discovery and management - Security Startups Make Debut - Security News Analysis   der Mouse
• [SC-L] Dr. Dobb's | The Truth About Software Security | January 20, 2007   der Mouse
• [SC-L] [Full-disclosure] Chinese Professor Cracks Fifth Data Security Algorithm (SHA-1)   der Mouse
• [SC-L] Perspectives on Code Scanning   der Mouse
• [SC-L] Perspectives on Code Scanning   der Mouse
• [SC-L] What's the next tech problem to be solved in software security?   der Mouse
• [SC-L] Harvard vs. von Neumann   der Mouse
• [SC-L] Harvard vs. von Neumann   der Mouse
• [SC-L] OWASP Publicity   der Mouse
• [SC-L] Insecure Software Costs US $180B per Year - Application and Perimeter Security News Analysis - Dark Reading   der Mouse
• [SC-L] Insecure Software Costs US $180B per Year - Application and Perimeter Security News Analysis - Dark Reading   der Mouse
• [SC-L] Careers in Secure application design and coding   Sean T Murray
• [SC-L] COBOL Exploits   Peter G. Neumann
• [SC-L] Software process improvement produces secure software?   Francisco Nunes
• [SC-L] Question about SSE-CMM   Francisco Nunes
• [SC-L] JavaScript Hijacking   Stefano Di Paola
• [SC-L] JavaScript Hijacking   Stefano Di Paola
• [SC-L] Insider threats and software   Pierre Parrend
• [SC-L] Darkreading: Secure Coding Certification   Johan Peeters
• [SC-L] Software Security Training for Developers   Johan Peeters
• [SC-L] Software Security Training for Developers   Johan Peeters
• [SC-L] Mainframe Security   Johan Peeters
• [SC-L] Mainframe Security   Johan Peeters
• [SC-L] Perspectives on Code Scanning   Paolo Perego
• [SC-L] Perspectives on Code Scanning   Paolo Perego
• [SC-L] Orizon v0.50 announce   Paolo Perego
• [SC-L] Code review pool   Paolo Perego
• [SC-L] Code review pool   Paolo Perego
• [SC-L] Building Security In vs Auditing   Gunnar Peterson
• [SC-L] The seven sins of programmers | Free Software Magazine   Gunnar Peterson
• [SC-L] What defines an InfoSec Professional?   Gunnar Peterson
• [SC-L] What defines an InfoSec Professional?   Gunnar Peterson
• [SC-L] How is secure coding sold within enterprises?   Gunnar Peterson
• [SC-L] Economics of Software Vulnerabilities   Gunnar Peterson
• [SC-L] MetriCon 2.0 CFP   Gunnar Peterson
• [SC-L] MetriCon 2.0 CFP   Gunnar Peterson
• [SC-L] MetriCon 2.0 CFP   Gunnar Peterson
• [SC-L] Tools: Evaluation Criteria   Gunnar Peterson
• [SC-L] Perspectives on Code Scanning   Gunnar Peterson
• [SC-L] Metricon 2.0   Gunnar Peterson
• [SC-L] Microsoft Pushes Secure, Quality Code   Gunnar Peterson
• [SC-L] IT industry creates secure coding advocacy group   Gunnar Peterson
• [SC-L] OWASP Publicity   Gunnar Peterson
• [SC-L] OWASP Appsec Europe 2007: deadline for refereed papers extended!   Frank Piessens
• [SC-L] Mainframe Security   Paul Powenski
• [SC-L] Economics of Software Vulnerabilities   Ed Reed
• [SC-L] Economics of Software Vulnerabilities   Ed Reed
• [SC-L] Economics of Software Vulnerabilities   Ed Reed
• [SC-L] State Department break-in last summer   Ed Reed
• [SC-L] COBOL Exploits   Mark Rockman
• [SC-L] Disable Bounds Checking?   Mark Rockman
• [SC-L] OWASP Publicity   Bernie Rosen
• [SC-L] University lecture on Sec Sw Eng online   Rafael Ruiz
• [SC-L] Secure Programming with Static Analysis   Julie Ryan
• [SC-L] Software process improvement produces secure software?   Julie Ryan
• [SC-L] statical analysis tools: language supports...   Indrek Saar
• [SC-L] Mainframe Security   Edward N Schofield
• [SC-L] temporary directories   Robert C. Seacord
• [SC-L] CFP: CERT Software, System and Information Security Cluster (HICSS-41)   Robert C. Seacord
• [SC-L] FW: What's the next tech problem to be solvedin softwaresecurity?   Robert C. Seacord
• [SC-L] FW: What's the next tech problem to be solvedin softwaresecurity?   Robert C. Seacord
• [SC-L] University lecture on Sec Sw Eng online   Robert C. Seacord
• [SC-L] Really dumb questions?   Robert C. Seacord
• [SC-L] QASEC Announcement: Writing Software Security Test Cases   J. M. Seitz
• [SC-L] Dark Reading - Desktop Security - Here Comes the (Web) Fuzz- Security News Analysis   J. M. Seitz
• [SC-L] Disclosure: vulnerability pimps? or super heroes?   J. M. Seitz
• [SC-L] statical analysis tools: language supports...   J. M. Seitz
• [SC-L] [fuzzing] MoKB take?   J. M. Seitz
• [SC-L] Darkreading: compliance   J. M. Seitz
• [SC-L] Interesting tidbit in iDefense Security Advisory 06.26.07   J. M. Seitz
• [SC-L] Interesting tidbit in iDefense Security Advisory 06.26.07   J. M. Seitz
• [SC-L] Microsoft Pushes Secure, Quality Code   J.M. Seitz
• [SC-L] Software security video podcast   J.M. Seitz
• [SC-L] What defines an InfoSec Professional?   Shea, Brian A
• [SC-L] Perspectives on Code Scanning   Shea, Brian A
• [SC-L] Software security video podcast   Shea, Brian A
• [SC-L] Insecure Software Costs US $180B per Year - Application and Perimeter Security News Analysis - Dark Reading   Shea, Brian A
• [SC-L] Best practices for encrypting client-side data   Robin Sheat
• [SC-L] Best practices for encrypting client-side data   Robin Sheat
• [SC-L] Best practices for encrypting client-side data   Robin Sheat
• [SC-L] Best practices for encrypting client-side data   Robin Sheat
• [SC-L] WEB2.0 Security Issues   Avi Shvartz
• [SC-L] Dark Reading - Desktop Security - Here Comes the (Web) Fuzz - Security News Analysis   Michael Silk
• [SC-L] Disclosure: vulnerability pimps? or super heroes?   Michael Silk
• [SC-L] What defines an InfoSec Professional?   Michael Silk
• [SC-L] Darkreading: compliance   Michael Silk
• [SC-L] Darkreading: compliance   Michael Silk
• [SC-L] Chinese Professor Cracks Fifth Data Security Algorithm (SHA-1)   Michael Silk
• [SC-L] What's the next tech problem to be solved in software security?   Michael Silk
• [SC-L] Perspectives on Code Scanning   Michael Silk
• [SC-L] Perspectives on Code Scanning   Michael Silk
• [SC-L] Insecure Software Costs US $180B per Year - Application and Perimeter Security News Analysis - Dark Reading   Andy Steingruebl
• [SC-L] Insecure Software Costs US $180B per Year - Application and Perimeter Security News Analysis - Dark Reading   Andy Steingruebl
• [SC-L] Code Analysis Tool Bakeoff   John Steven
• [SC-L] How is secure coding sold within enterprises?   John Steven
• [SC-L] How is secure coding sold within enterprises?   John Steven
• [SC-L] Technology-specific Security Standards   John Steven
• [SC-L] Really dumb questions?   John Steven
• [SC-L] Harvard vs. von Neumann   James Stibbards
• [SC-L] OWASP Publicity   James Stibbards
• [SC-L] How is secure coding sold within enterprises?   Andrew van der Stock
• [SC-L] How is secure coding sold within enterprises?   Andrew van der Stock
• [SC-L] COBOL Exploits   Andrew van der Stock
• [SC-L] Mainframe Security   Andrew van der Stock
• [SC-L] Darkreading: Secure Coding Certification   Joe Teff
• [SC-L] Vulnerability tallies surged in 2006 | The Register   Benjamin Tomhave
• [SC-L] WEB2.0 Security Issues   Benjamin Tomhave
• [SC-L] differences between Threat Analysis and Threat Modeling   Benjamin Tomhave
• [SC-L] What defines an InfoSec Professional?   Benjamin Tomhave
• [SC-L] Darkreading: compliance   Benjamin Tomhave
• [SC-L] Technology-specific Security Standards   Benjamin Tomhave
• [SC-L] author contends CompSci != Maths   Benjamin Tomhave
• [SC-L] Sw Dev Laws, Engineers and Feasibility   Benjamin Tomhave
• [SC-L] Bernstein's new paper on secure coding   Benjamin Tomhave
• [SC-L] [Fwd: Seeking questions for Panel discussion on website vulnerability disclosure during OWASP-WASC AppSec Conference on Nov 15]   Benjamin Tomhave
• [SC-L] OWASP Publicity   Benjamin Tomhave
• [SC-L] OWASP Publicity   Benjamin Tomhave
• [SC-L] temporary directories   Wietse Venema
• [SC-L] What's the next tech problem to be solved in software security?   Wietse Venema
• [SC-L] What's the next tech problem to be solved in software security?   Stephen de Vries
• [SC-L] Vulnerability tallies surged in 2006 | The Register   Wall, Kevin
• [SC-L] Economics of Software Vulnerabilities   Wall, Kevin
• [SC-L] Tools: Evaluation Criteria   Wall, Kevin
• [SC-L] Interesting tidbit in iDefense Security Advisory 06.26.07   Wall, Kevin
• [SC-L] MetriCon 2.0 CFP   Bret Watson
• [SC-L] Really dumb questions?   Bret Watson
• [SC-L] Question about SSE-CMM   Bret Watson
• [SC-L] Compilers   Florian Weimer
• [SC-L] Announcement: The Cross-site Request Forgery FAQ   Florian Weimer
• [SC-L] State Department break-in last summer   Florian Weimer
• [SC-L] Darkreading: Secure Coding Certification   Florian Weimer
• [SC-L] Interesting tidbit in iDefense Security Advisory 06.26.07   Florian Weimer
• [SC-L] Insider threats and software   Florian Weimer
• [SC-L] Mainframe Security   Florian Weimer
• [SC-L] Mainframe Security   Florian Weimer
• [SC-L] Insecure Software Costs US $180B per Year - Application and Perimeter Security News Analysis - Dark Reading   Pete Werner
• [SC-L] darkreading: PCI, web app firewalls, and software security   Pete Werner
• [SC-L] temporary directories   David A. Wheeler
• [SC-L] Economics of Software Vulnerabilities   David A. Wheeler
• [SC-L] Source code hiding doesn't work (was: Re: State Department break-in last summer)   David A. Wheeler
• [SC-L] Interesting tidbit in iDefense Security Advisory 06.26.07   David A. Wheeler
• [SC-L] Interesting tidbit in iDefense Security Advisory 06.26.07   David A. Wheeler
• [SC-L] Announcing: 6th OWASP AppSec Conference - May 15-17 2007 - Milan, Italy   Dave Wichers
• [SC-L] Final Announcement: 6th OWASP AppSec Conference - May 15-17 2007 - Milan, Italy   Dave Wichers
• [SC-L] 7th OWASP AppSec Conference @ eBay in San Jose - Nov 12-15, 2007   Dave Wichers
• [SC-L] OWASP & WASC AppSec 2007 Conference - Nov 12-15 - San Jose, CA   Dave Wichers
• [SC-L] FINAL REMINDER: OWASP & WASC AppSec 2007 Conference - Nov 12-15 - San Jose, CA   Dave Wichers
• [SC-L] Software security video podcast   Wisseman, Stan [USA]
• [SC-L] Administrivia: Anyone up for a 2nd annual SC-L BoF at S3?   Kenneth Van Wyk
• [SC-L] Source Code Specialist Fortify to Buy Secure Software   Kenneth Van Wyk
• [SC-L] Adapting Penetration Testing for Software Development Purposes   Kenneth Van Wyk
• [SC-L] Vulnerability tallies surged in 2006 | The Register   Kenneth Van Wyk
• [SC-L] Dark Reading - Discovery and management - Security Startups Make Debut - Security News Analysis   Kenneth Van Wyk
• [SC-L] Dr. Dobb's | The Truth About Software Security | January 20, 2007   Kenneth Van Wyk
• [SC-L] Anyone here attending the 6th Semi-Annual Software Assurance Forum   Kenneth Van Wyk
• [SC-L] The seven sins of programmers | Free Software Magazine   Kenneth Van Wyk
• [SC-L] Dark Reading - Desktop Security - Here Comes the (Web) Fuzz - Security News Analysis   Kenneth Van Wyk
• [SC-L] Dark Reading - Desktop Security - Here Comes the (Web) Fuzz - Security News Analysis   Kenneth Van Wyk
• [SC-L] Dark Reading - Desktop Security - Here Comes the (Web) Fuzz - Security News Analysis   Kenneth Van Wyk
• [SC-L] Disclosure: vulnerability pimps? or super heroes?   Kenneth Van Wyk
• [SC-L] Nokia Lets Users Update Phone Software Directly (Phone Scoop)   Kenneth Van Wyk
• [SC-L] STSC CrossTalk - Secure Coding Standards - Mar 2007   Kenneth Van Wyk
• [SC-L] Justice League » Blog Archive » Cigital’s Touchpoints versus Microsoft’s SDL [Cigital]   Kenneth Van Wyk
• [SC-L] Information Protection Policies   Kenneth Van Wyk
• [SC-L] Full Disclosure: Fuzzled - Perl fuzzing framework   Kenneth Van Wyk
• [SC-L] SANS Software Security Institute announced   Kenneth Van Wyk
• [SC-L] Stakes are High for Vista Security   Kenneth Van Wyk
• [SC-L] Stakes are High for Vista Security   Kenneth Van Wyk
• [SC-L] 1 Raindrop: Common Attack Pattern Enumeration and Classification (CAPEC)   Kenneth Van Wyk
• [SC-L] Administrivia: Moderator on hiatus   Kenneth Van Wyk
• [SC-L] Administrivia: Moderator is in, and SC-L BoF in Spain?   Kenneth Van Wyk
• [SC-L] Who's To Blame For Insecure Software? Maybe You   Kenneth Van Wyk
• [SC-L] What's the next tech problem to be solved in software security?   Kenneth Van Wyk
• [SC-L] IBM to catch Watchfire security technology | Tech News on ZDNet   Kenneth Van Wyk
• [SC-L] What's the next tech problem to be solved in software security?   Kenneth Van Wyk
• [SC-L] Harvard vs. von Neumann   Kenneth Van Wyk
• [SC-L] Interesting tidbit in iDefense Security Advisory 06.26.07   Kenneth Van Wyk
• [SC-L] how far we still need to go   Kenneth Van Wyk
• [SC-L] Software process improvement produces secure software?   Kenneth Van Wyk
• [SC-L] Opera Uses Mozilla Fuzzer Tool To Find 'Highly Severe' Bug -- Browser -- InformationWeek   Kenneth Van Wyk
• [SC-L] Fwd: Announcement: Releasing CORE GRASP for PHP. An open source, dynamic web application protection system.   Kenneth Van Wyk
• [SC-L] Fwd: [1st-t] Vancouver 2008 First Conference - Call for Papers   Kenneth Van Wyk
• [SC-L] CERT Advances Secure Coding Standards - Desktop Security News Analysis - Dark Reading   Kenneth Van Wyk
• [SC-L] Microsoft Pushes Secure, Quality Code   Kenneth Van Wyk
• [SC-L] IT industry creates secure coding advocacy group   Kenneth Van Wyk
• [SC-L] Mainframe Security   Kenneth Van Wyk
• [SC-L] COBOL Exploits   Kenneth Van Wyk
• [SC-L] Fwd: People in glass houses shouldn't brick phones   Kenneth Van Wyk
• [SC-L] Insecure Software Costs US $180B per Year - Application and Perimeter Security News Analysis - Dark Reading   Kenneth Van Wyk
• [SC-L] Insecure Software Costs US $180B per Year - Application and Perimeter Security News Analysis - Dark Reading   Kenneth Van Wyk
• [SC-L] Fwd: SCARE metrics and tool release   Kenneth Van Wyk
• [SC-L] Redmond Developer News | Best Defense?   Kenneth Van Wyk
• [SC-L] Dark Reading - Discovery and management - Security Startups Make Debut - Security News Analysis   Chris Wysopal
• [SC-L] Adapting Penetration Testing for Software Development Purposes   Chris Wysopal
• [SC-L] Dr. Dobb's | The Truth About Software Security | January 20, 2007   Chris Wysopal
• [SC-L] Security Testing track: Software Testing Conference:Washington DC   Chris Wysopal
• [SC-L] Interesting Blog Entry on Tools Coverage   Chris Wysopal
• [SC-L] QASEC Announcement: Writing Software Security Test Cases   bugtraq at cgisecurity.net
• [SC-L] QASEC Announcement: Writing Software Security Test Cases   bugtraq at cgisecurity.net
• [SC-L] Announcement: The Cross-site Request Forgery FAQ   bugtraq at cgisecurity.net
• [SC-L] Announcement: The Cross-site Request Forgery FAQ   bugtraq at cgisecurity.net
• [SC-L] Could mandates on disclosing software effects benefit   bugtraq at cgisecurity.net
• [SC-L] Meeting at RSA next week?   bugtraq at cgisecurity.net
• [SC-L] [WEB SECURITY] Wordpress website hacked, wordpress backdoored   bugtraq at cgisecurity.net
• [SC-L] Darkreading: compliance   bugtraq at cgisecurity.net
• [SC-L] Darkreading: compliance   bugtraq at cgisecurity.net
• [SC-L] What's the next tech problem to be solved in software   bugtraq at cgisecurity.net
• [SC-L] free wine + IEEE S&P at RSA + free wine!   KClark-Fisher at computer.org
• [SC-L] Economics of Software Vulnerabilities   security curmudgeon
• [SC-L] COBOL Exploits   security curmudgeon
• [SC-L] SC-L Digest, Vol 3, Issue 197   dcrocker at eschertech.com
• [SC-L] differences between Threat Analysis and Threat Modeling   scott hollatz
• [SC-L] University lecture on Sec Sw Eng online   Holger.Peine at iese.fraunhofer.de
• [SC-L] CfP for 2nd Int. Workshop on Secure Software Engineering   Holger.Peine at iese.fraunhofer.de
• [SC-L] Compilers   ljknews
• [SC-L] Building Security In vs Auditing   ljknews
• [SC-L] Hiring Security Architects   ljknews
• [SC-L] Secure software education. Does it start with our tools?   ljknews
• [SC-L] Dark Reading - Discovery and management - Security Startups Make Debut - Security News Analysis   ljknews
• [SC-L] Dark Reading - Discovery and management - Security Startups Make Debut - Security News Analysis   ljknews
• [SC-L] Dark Reading - Discovery and management - Security Startups Make Debut - Security News Analysis   ljknews
• [SC-L] Dr. Dobb's | The Truth About Software Security | January 20, 2007   ljknews
• [SC-L] Economics of Software Vulnerabilities   ljknews
• [SC-L] Darkreading: compliance   ljknews
• [SC-L] Best practices for encrypting client-side data   ljknews
• [SC-L] Best practices for encrypting client-side data   ljknews
• [SC-L] Darkreading: Secure Coding Certification   ljknews
• [SC-L] Darkreading: Secure Coding Certification   ljknews
• [SC-L] Darkreading: Secure Coding Certification   ljknews
• [SC-L] Tools: Evaluation Criteria   ljknews
• [SC-L] What's the next tech problem to be solved in software security?   ljknews
• [SC-L] What's the next tech problem to be solved in software security?   ljknews
• [SC-L] FW: What's the next tech problem to be solvedin softwaresecurity?   ljknews
• [SC-L] FW: What's the next tech problem to be solvedin softwaresecurity?   ljknews
• [SC-L] Harvard vs. von Neumann   ljknews
• [SC-L] The Next Frontier   ljknews
• [SC-L] Resources to fix vulns   ljknews
• [SC-L] Resources to fix vulns   ljknews
• [SC-L] how far we still need to go   ljknews
• [SC-L] Dilbert Does Software Testing   ljknews
• [SC-L] Mainframe Security   ljknews
• [SC-L] COBOL Exploits   ljknews
• [SC-L] Mainframe Security   ljknews
• [SC-L] Mainframe Security   ljknews
• [SC-L] Mainframe Security   ljknews
• [SC-L] Code review pool   ljknews
• [SC-L] Dr. Dobb's | The Truth About Software Security | January 20, 2007   mudge
• [SC-L] Economics of Software Vulnerabilities   mudge
• [SC-L] Darkreading: Secure Coding Certification   pmeunier
• [SC-L] University lecture on Sec Sw Eng online   pmeunier
• [SC-L] Code Coverage and Code Quality tools   avi shvartz
• [SC-L] Insider threats and software   silky
• [SC-L] Insider threats and software   silky
• [SC-L] Insecure Software Costs US $180B per Year - Application and Perimeter Security News Analysis - Dark Reading   silky
• [SC-L] Insecure Software Costs US $180B per Year - Application and Perimeter Security News Analysis - Dark Reading   silky
• [SC-L] SC-L Digest, Vol 3, Issue 197   karger at watson.ibm.com
• [SC-L] WASC Announcement: Distributed Open Proxy Honeypot Project Data Released   announcements at webappsec.org
• [SC-L] OWASP & WASC AppSec 2007   announcements at webappsec.org
• [SC-L] WASC Announcement: The Script Mapping Project Results and Call for Participation   announcements at webappsec.org
• [SC-L] Insecure Software Costs US $180B per Year - Application and   robert at webappsec.org
• [SC-L] Vulnerability tallies surged in 2006 | The Register   pete werner

Last message date: Fri Dec 21 18:01:33 EST 2007
Archived on: Sat Dec 22 11:41:21 EST 2007

• Messages sorted by: [ thread ] [ subject ] [ date ]
• More info on this list...