Enduring Ideas in the Realm of Software
If you know the underlying principles for security, you can be more effective in your security design. While working on Improving Web Application Security: Threats and Countermeasures, my team focused on creating a durable set of security principles. The challenge was to make the principles more useful. It’s one thing to know the principles, but …
“Security is not a product, but a process. It’s the way we think about things, the way we reason and the way we approach problems.” — Bruce Schneier The Security Threats and Countermeasures Framework is a comprehensive and organized approach to software security, utilizing Security Hot Spots to address common vulnerabilities and promote best practices. …
How can you quickly determine whether a recommendation or technique is relevant to your context? You can use context precision. I created the term “Context Precision” to illuminate the idea of getting specific. Context precision refers to the ability to identify and define the specific context in which a particular concept, idea, or system is …
“The goal is to turn data into information, and information into insight.” –Carly Fiorina On This Page Performance Hot Spot Categories Performance Threats Performance Vulnerabilities Performance Countermeasures The Performance Threats and Countermeasures Framework is a comprehensive and organized approach to software performance, utilizing Performance Hot Spots to address common bottlenecks and promote best practices. During …
STRIDE is an acronym to help you think about potential software security threats and attacks. It helps you think evil (i.e. like an attacker.) I had the privilege of talking to one of the creators of STRIDE, Loren Kohnfelder. He told me that he originally created STRIDE to help people get in the right mind-set …
