Gary McGraw@cigitalgem
For far too long, #swsec and #appsec have focused only on BUGS and have swept the idea of FLAWS under the rug. The Log4j defect is a FLAW.
See #4
3615
Posts with #SWSec
#SWSec
Public posts on X that use #SWSec.
Related hashtags
Eric Baize@ericbaizeIn 10 years, I have not found a more effective picture to explain software security. #swsec
682.9K2.1K- Eric Baize@ericbaizeTo boys and #GirlsWhoCode: This is an example of a race condition. #swsecABC News @ABCIn bizarre Daylight Saving Time twist, one twin who was born after the other in Massachusetts is older on paper.333155
Steve Christey Coley, BS 🐀@SushiDudeHey vulnerability/weakness geeks in software security! Are there any stats or studies that (quantitatively||objectively) link changes/mitigations in the SDLC with reductions in specific CVEs or CWEs? Asking for a friend and myself. Feels a little too soon for me? 🤷♂️ #swsec8736- Gary McGraw@cigitalgemWhat happens when a punk rocker and developer gets interested in software security? @shehackspurple knows all about it. Have a listen to Silver Bullet. #swsec
1826 
𝙎𝙚𝙘𝙁𝙞𝙜𝙝𝙩𝘾𝙡𝙪𝙗@SecFightClubKillers that blazed the path forward AppSec @cigitalgem @thedeadrobots LangSec @maradydd @FalconDarkstar hex-em-hell Threat Modeling @adamshostack @BrkSchoenfield @jonathanmarcil @roberthurlbut Owasp Top 10 @manicode Sec Community @Niki7a @viewfromabook @Kerberosmansour7928- Gary McGraw@cigitalgem@SecFightClub@SecFightClub @thedeadrobots @maradydd @FalconDarkstar @adamshostack @BrkSchoenfield @jonathanmarcil @roberthurlbut @manicode @Niki7a @viewfromabook @Kerberosmansour A very old tome from 2001. #swsec (first in the world)
529 - Eric Baize@ericbaize#swsec tools are to developers what good ingredients are to a chef: Necessary, but far from sufficient.Margaret Bruun @MargaretBruun243
- Gary McGraw@cigitalgemDear everyone on Earth. Security engineering is not only about using security features like applied cryptography, it is about building security into you entire design and implementing things properly in code. #swsec82493
- Gary McGraw@cigitalgemTonight (Monday 4.9) at 8pm EST I will be giving two interviews on @TF7Radio. We talk #swsec, #BSIMM, and the CISO report. Tune in here137
Marie Moe@MarieGMoeWe are hiring! Want to join our amazing team and do research on secure software development? #swsec #academicjobs #postdocjobsMartin Gilje Jaatun @[email protected] @SeniorFroskWe are looking for a postdoc in #swsec for the SoS-Agile project! Please RT!088
Martin Gilje Jaatun @[email protected]@SeniorFroskWe are looking for a postdoc in #swsec for the SoS-Agile project! Please RT!033
- Eric Baize@ericbaizeTwitter timeline magic outlines the difference between security products and secure products | #infosec vs. #swsec
0119 - Eric Baize@ericbaizeWe are not shifting security left enough. Kids need to start learning security when they start coding and continue in their college computer science courses. #swsec2410
- Gary McGraw@cigitalgemNorway Sikkerhets Festivalen starts now! 1200 people is huge for a Norwegian conference. My keynote on #swsec is at 14:45
217 - Eric Baize@ericbaize50% of programmers don't have a CS degree. The other 50% did not need security training to graduate. All must learn secure coding. #swsec1106
AppSecure.nrw@AppSecureNRWSecurity betrifft uns alle! ☝🏼 Mit mehreren Milliarden verfügbaren Smartphones und Tablets erreichen App- und Webanwendungen leicht mehrere Millionen Benutzer. Umso wichtiger ist es, den Austausch hochsensitiver Daten zu sichern! 🛡️ #SWSec #privacy #data #DevSecOps
043- Gary McGraw@cigitalgemHere's the deal. If you want to do #swsec (aka #appsec), you really need to know how to code. Honest.6520
- Show more posts
