New language used to create provably correct cryptographic hash function algorithm is released as open source … continue reading
The editors are glad to see security being discussed at conferences; ScrumMaster certification should be made more stringent … continue reading
Attendees give a wide variety of ideas about the subject, with Rex Black adding in some of his own … continue reading
The jointly created product helps development teams and security teams collaborate on software projects … continue reading
Tests can be run at any point in the development life cycle by using SecurityReview’s Upload APIs … continue reading
IBM’s Ryan Berg has written a white paper that lists five vulnberabilities that face application security efforts … continue reading
The editors talk about unsafe ATMs, Facebook privacy, Hadoop, and a really cool thing IBM is doing … continue reading
The Cloud Readiness Scorecard checks for defects and alerts developers of potential problems … continue reading
The BSIMM project gathers security procedures from 30 companies, and has crafted a list of 15 general security points … continue reading
The new service from Veracode can perform quick intelligence service checks on software for dynamic or manual testing … continue reading
Layer 7’s Francois Lascelles backs SAML over OpenID for RESTful Web-service security … continue reading
Experts say that until cloud security standards mature and are adopted more widely, adoption will be tepid … continue reading
