Security Archives - Code Curmudgeon

Better Living Through Security Coding Standards

Posted on September 19, 2018 by Code Curmudgeon

Time for Standards 3d words on a clock face to illustrate guidelines and regulations for measuring performance or quality

Security for IoT and embedded devices is essentially a mess. If you’re not aware of it by now, stop and take a minute to...

Phishing Alert – Secret Army Gold

Posted on October 7, 2017 by Code Curmudgeon

Key, padlock and laptop with wording computer and alert concept : Cyber and technology security concept

Two phun phishing emails in two days. Both from the same domain, nac.net, which you might want to add to your block list. Yesterday...

Software Safety Keynote EuroSPI 2016

Posted on September 16, 2016 by Code Curmudgeon

I was honored this week to have the opportunity to present a keynote session at EuroSPI 2016. The title of my presentation was “Software...

Hacking: Medical Devices

Posted on April 4, 2016 by Jessica Ann Harris

You have control over your own body, right? Well, scary scenarios in the healthcare industry are increasing in awareness. In the past, with the growth of...

1 2 3 … 5 Next ›

Definitioner

vulnerability: This is a tricky word, especially in application security or cybersecurity. The simple definition in a software context is that the code has some problem that could be exploited by someone at some point. Some think of it as a piece of code with a proven exploit, IE a static analysis violation with a stack trace and values used. This is a very narrow definition that probably doesn't help improve the state of the art. I prefer the idea that it's code that is exploitable based on the body of knowledge (as encapsulated in software coding standards).
CAN (Controller Area Network): Controller Area Network aka CAN aka CAN Bus is a wiring standard for vehicles that enables communication between various components and devices without having a host computer. For example doors, brakes, transmission.
Internet of Things: common devices that have been internet enabled in order to remotely monitor and manage them, or collaborate with other devices, or provide extra functionality by accessing the internet. Like an internet enabled thermostat that you can control with your smartphone - see the Nest from Google.
IoT (Internet of Things): common devices that have been internet enabled in order to remotely monitor and manage them, or collaborate with other devices, or provide extra functionality by accessing the internet. Like an internet enabled thermostat that you can control with your smartphone - see the Nest from Google.
DoS (denial-of-service): Attackers try to make a computer, network, or application unavailable to end-users. For example by overloading it with too much traffic as in a distributed denial of service.