SD Secure Start Newsletter

SD Secure Start March 2006

WatchFire’s AppScan 6.0; Product Review: Standing Guard; 2006 Dr. Dobb's Journal Excellence in Programming Award; Sun Patches 7 Critical Java Runtime Bugs; Quantum Cryptography Research Advances and IBM Research May Extend Moore's Law; New Ada Standard on the Horizon

Build It In, Dont Trowel It On

Build It In, Don’t Trowel It On; SSH Kerberos Authentication Using GSSAPI and SSPI; Hot Link

Beat Back Attackers

In this Issue: Beat Back Attackers; Security is a Service, Not a Product; Hot Links

Safer Software through the Ages

Security Timewarp; 2nd Annual Offshore Survey; Today: Security Software Is No Security Blanket; 5 Years Ago: Building Better Code; 7 Years Back: Lack of Security Awareness

Safe SOAP, Executive Tips and Global Help

Product Showcase: Seal Up Your SOAP; Security Shelf: Executive Tips and International Help; Hot Links

SD Secure Start: September 2005

Investigating Source Code Theft

SD Secure Start: August 2005

Software Theft and the Analytical Machine; Investigating Software and Source-Code Theft; The Definition and Origin of Software

SD Secure Start: July 2005

Security must be built in throughout the application development lifecycle.

SD Secure Start: May 2005

Security-Hardening Third-Party Applications
The most important information security question is how to security-harden third-party applications. Whether we have access to the source code or not, an application that comes from a third-party developer or independent software vendor is typically far too complex for us to easily understand its vulnerabilities.

SD Secure Start: April 2005

Strength in Numbers: Algorithms and security libraries that have stood the test of public use can be a good bet, but feedback and caution provide extra protection against unnoticed bugs.

SD Secure Start: March 2005

Trust Tentatively: It's easy to be shortsighted about our own code.

SD Secure Start: February 2005

Paranoia Pays: Preserving binary secrecy is best accomplished with wariness.

SD Secure Start: January 2005

The One-Click Trick

SD Secure Start: December 2004

Complex systems may include subtle problems that might go unnoticed. Complex code is hard to maintain and tends to be buggy. To shore up security, aim for simplicity.

SD Secure Start: November 2004

Divide and Conquer

SD Secure Start: October 2004

Less is More: The stingier you are with access, the safer your system becomes

SD Secure Start: September 2004

Error handling is notoriously tricky, but a poorly designed protocol can play into an attacker's hand.

SD Secure Start: August 2004

Defense in Depth

SD Secure Start: May 2004

10 Tips for Safer Software & Secure the Weakest Link

SD Secure Start: April 2004

Bruce Schneier Talks Homeland Security