Errata Security

Joel Spolsky has a famous list of " 12 Steps to Better Code ". I thought I'd create a similar list for safer, more secure code...

(This post is a response to the blog post at " Layer 8: Connecting the risk dots ," mostly because I typed the whole thing out on ...

Last week I presented a new methodology for developing secure code called Rogue Secure Development (pdf). The talk was at SecTor in Toronto...

One of the most common features of "secure development" is the ability to avoid functions that are known to be dangerous, functio...

The big " zero-day " exploit this week was the malicious Windows DLL payload brought to the spotlight by Rapid7's HD Moore. T...

Errata Security released the results of a survey conducted over the week of Security B-Sides and the RSA Conference in San Fr...

Errata Security is conducting a survey on the real world usage of software development methodologies such as Microsoft SDL, OWASP's SA...