Security – Page 9 – Code Curmudgeon

Hybrid Security Talk at Better Software Conference West

Posted on June 4, 2013 by Code Curmudgeon

I’m speaking tomorrow at the Better Software Conference West at Caesars Palace in Las Vegas. If you’re going to be at the conference come...

SQL Injection Hall of Shame updated

Posted on June 3, 2013 by Code Curmudgeon

Just a reminder for those who aren’t aware – I maintain a list here I like to call the “SQL Injection Hall of Shame“....

Development Testing for Compliance Seminar in DC

Posted on May 8, 2013 by Code Curmudgeon

I’m doing a free seminar next week in the DC area “Development Testing can help you comply with government regulations and security guidelines”. Entry...

‹ Prev 1 … 7 8 9 10 11 12 Next ›

Definitioner

CAN (Controller Area Network): Controller Area Network aka CAN aka CAN Bus is a wiring standard for vehicles that enables communication between various components and devices without having a host computer. For example doors, brakes, transmission.
code review: Code review is a process where programmers look at each others code and evaluate it's fitness for the intended purpose. It can find mistakes in design and implementation beyond simple syntax problems and improve quality.
peer code review (code review): Code review is a process where programmers look at each others code and evaluate it's fitness for the intended purpose. It can find mistakes in design and implementation beyond simple syntax problems and improve quality.
Development Testing: Development Testing is a software development process that involves practices such as static analysis, data flow analysis, metrics, peer code review, unit testing, code coverage and other steps that can be performed at development time. The goal is not to replace traditional QA, but to reduce time and cost by catching problems earlier.
NIST: National Institute of Standards and Technology
static analysis: Any form of software analysis that can be done on the code without actually executing the code. Encompasses techniques like pattern-based analysis, metrics, code review, etc.