Secure Code Review Archives

Musings through the lens…

How To Avoid the Blind Spot In Static Analysis Tools Caused By Frameworks

Excerpt from my latest blog post at Cigital… More and more organizations are using static analysis tools to find security Continue Reading

My latest blog post on Cigital’s blog. Analyzing source code for security bugs gets a lot of attention and focus Continue Reading

This isn’t the only place my blogging appears. The Benefits of Code Scanning on Cigital’s Blog: “All software projects are Continue Reading

Sometimes the joys of waiting for tools is you simply can’t wait. No matter how happily the tools will take Continue Reading

Ah the joys of waiting for tools to do their job. Set the scan up either of the source code Continue Reading

One of my favorite memories of living through Microsoft’s adoption of secure development was sitting in a hacking demo by Continue Reading