Home » Archive

Articles in the Uncategorized Category

Architecture, Uncategorized »

[21 Sep 2008 | 3 Comments | ]

How do you structure a team around product lines?  Largely, it depends on the size and scope of your organization and product lines.  A small organization (30 people or less) can use a development department.  Larger organizations use business units to focus on the different functional and technical areas of the project.  Another option is a domain engineering unit, in which multiple business units share a central domain engineering unit.  In extremely large organizations, you might have multiple domain engineering units that specialize in their respective product lines, as …

Security, Uncategorized »

[7 Apr 2008 | Comments Off on Security Principles | ]

If you know the underlying principles for security, you can be more effective in your security design.  While working on Improving Web Application Security: Threats and Countermeasures, my team focused on creating a durable set of security principles.  The challenge was to make the principles more useful.  It’s one thing to know the principles, but another to turn it into action. 
Turning Insights Into Action
To make the principles more useful, we organized them using our Security Frame.  Our Security Frame is a set of actionable, relevant categories that shape your key …