Standards Archives - Code Curmudgeon

Better Living Through Security Coding Standards

Posted on September 19, 2018 by Code Curmudgeon

Time for Standards 3d words on a clock face to illustrate guidelines and regulations for measuring performance or quality

Security for IoT and embedded devices is essentially a mess. If you’re not aware of it by now, stop and take a minute to...

Keynote at EuroAsiaSPI2 2016 Conference

Posted on August 24, 2016 by Code Curmudgeon

If you’re going to be in Europe in September, I’ll be speaking at the EuroAsiaSPI2 2016 conference in Graz, Austria on September 15th. EuroAsiaSPI2...

False Positives and Other Misconceptions in Static Analysis

Posted on November 1, 2011 by Code Curmudgeon

A sheep that is throwing a shadow of a wolf

In ongoing discussions here at the blog and elsewhere, I keep seeing the topic of false positives in static analysis come up. It’s certainly...

A Flash in the Page

Posted on September 19, 2011 by Code Curmudgeon

For those of you who haven’t been following it (IE people without a smartphone), there has been a little tiff between Apple (AAPL) and...

1 2 Next ›

Definitioner

vulnerability: This is a tricky word, especially in application security or cybersecurity. The simple definition in a software context is that the code has some problem that could be exploited by someone at some point. Some think of it as a piece of code with a proven exploit, IE a static analysis violation with a stack trace and values used. This is a very narrow definition that probably doesn't help improve the state of the art. I prefer the idea that it's code that is exploitable based on the body of knowledge (as encapsulated in software coding standards).
CAN (Controller Area Network): Controller Area Network aka CAN aka CAN Bus is a wiring standard for vehicles that enables communication between various components and devices without having a host computer. For example doors, brakes, transmission.
HTML5: HTML5 is the most recent version of the HTML standard. It is a language used to create web pages. Currently it is a draft standard, but it supported by all major browsers. HTML4 is the current actual standard.
AJAX: Asynchronous JavaScript and XML. It's a set of web technologies that help create interactive web applications.
Flash: Web-based multimedia platform. Used for putting animation, interactivity, and video on web pages.
CPU: The CPU or Central Processing Unit is the key brain of the computer, it's the part where most computation is actually done.