https://www.ostering.com/ https://www.ostering.com/antlr-and-javacc-parser-generators/ 2025-08-07T15:02:16+02:00 https://www.ostering.com/media/posts/2/tool-592440_1920.jpg https://www.ostering.com/application-security-is-more-than-just-pen-testing/ 2025-09-21T18:02:18+02:00 https://www.ostering.com/media/posts/21/appsec_teaser.png https://www.ostering.com/calculating-risk-across-project-real-estate-using-graph-analysis/ 2025-08-27T10:47:49+02:00 https://www.ostering.com/media/posts/4/sweep.jpg https://www.ostering.com/media/posts/4/dependency_graph_example1.png https://www.ostering.com/media/posts/4/dependency_graph_example2.png https://www.ostering.com/capec-stride-mapping/ 2025-08-07T15:00:41+02:00 https://www.ostering.com/media/posts/3/capec_stride_mapping_thumbnail.png https://www.ostering.com/configuring-tomcat-7-single-sign-on-with-spnego-kerberos-and-ldap-part-2/ 2025-08-07T15:02:49+02:00 https://www.ostering.com/media/posts/5/rolodex.jpg https://www.ostering.com/configuring-tomcat-single-sign-on-with-spnego-kerberos-and-ldap/ 2025-08-07T15:03:20+02:00 https://www.ostering.com/media/posts/6/buckingham-palace.jpg https://www.ostering.com/cursor-as-you-dev-team/ 2026-02-23T11:24:28+01:00 https://www.ostering.com/media/posts/46/cursor-dev-team.jpg https://www.ostering.com/dependency-pruning-and-tree-shaking/ 2026-03-31T17:11:28+02:00 https://www.ostering.com/media/posts/53/pruning.png https://www.ostering.com/media/posts/53/reachability_direction_comparison.png =680x340 "Reachability Direction Comparison" https://www.ostering.com/media/posts/53/metadata_table_scan_process.png =680x480 "Metadata Table Scan Process" https://www.ostering.com/media/posts/53/confidence_scoring_model.png =680x460 "Confidence Scoring Model" https://www.ostering.com/media/posts/53/one_method_dependency_cascade.png =680x520 "One-Method Dependency Cascade" https://www.ostering.com/media/posts/53/pruning_impact_before_after_svg.png =680x488 "Pruning Impact — Before vs After" https://www.ostering.com/games-with-purpose-nov-2022/ 2025-08-05T18:16:37+02:00 https://www.ostering.com/media/posts/7/games_small.jpg https://www.ostering.com/getting-results/ 2025-08-06T14:17:53+02:00 https://www.ostering.com/media/posts/27/center-736423_1280.jpg https://www.ostering.com/how-is-learning-a-human-language-like-learning-a-computer-language/ 2025-08-07T15:04:15+02:00 https://www.ostering.com/media/posts/8/books.jpg https://www.ostering.com/ideas-and-opinions-from-the-trenches/ 2026-02-21T14:10:53+01:00 https://www.ostering.com/media/posts/38/michael-caine-idea.png https://www.ostering.com/media/posts/38/reachability-dep-injection.png =1024x1024 "What about the stuff that's in config and not in the code?" https://www.ostering.com/media/posts/38/dependency_injection.png =1344x768 "Dependency Injection" https://www.ostering.com/media/posts/38/runtime_reachability.png =1344x710 "Are we gonna hit that edge case? Maybe when the moon and the stars align!" https://www.ostering.com/media/posts/38/prunning.png =1024x1024 "Lets get rid of these weak dependencies we're not using!" https://www.ostering.com/media/posts/38/sast-fn.png =1024x1024 "Ta da! We have a really low false positive rate" https://www.ostering.com/media/posts/38/graph.png =1024x1024 "If only we had the trustworthyness data" https://www.ostering.com/introduction-to-digital-signatures-for-managers/ 2025-08-07T18:25:39+02:00 https://www.ostering.com/media/posts/10/digital_signature.jpg https://www.ostering.com/introduction-to-kerberos-for-managers/ 2025-08-07T14:58:20+02:00 https://www.ostering.com/media/posts/11/kerberos_myth-01.png https://www.ostering.com/introduction-to-public-key-encryption-for-managers/ 2025-08-07T14:58:06+02:00 https://www.ostering.com/media/posts/12/encryption.png https://www.ostering.com/introduction-to-saml-for-managers/ 2025-08-07T14:57:55+02:00 https://www.ostering.com/media/posts/13/key-96233_1920.jpg https://www.ostering.com/introduction-to-ssl-for-managers/ 2025-08-07T14:57:44+02:00 https://www.ostering.com/media/posts/14/ssl.jpg https://www.ostering.com/is-your-ai-philosophy-broken/ 2026-02-23T11:24:48+01:00 https://www.ostering.com/media/posts/39/ai_vuln_factory-2.png https://www.ostering.com/media/posts/39/aging-subject-matter-experts.png =1024x1024 "Broken Pipeline" https://www.ostering.com/media/posts/39/Salary-Dumping1.png =1024x1024 "Salary Dumping" https://www.ostering.com/it-extremists/ 2025-08-06T11:41:32+02:00 https://www.ostering.com/media/posts/24/antarctica.jpg https://www.ostering.com/kerberos-user-impersonation-on-tomcat-with-apache/ 2025-08-05T22:20:37+02:00 https://www.ostering.com/media/posts/16/padlock.jpg https://www.ostering.com/kicking-off-security-maturity/ 2025-10-13T10:04:51+02:00 https://www.ostering.com/media/posts/45/image-4.png https://www.ostering.com/media/posts/45/17600878635417.jpg https://www.ostering.com/media/posts/45/17602721028630.jpg https://www.ostering.com/media/posts/45/17600874790096-2.jpg https://www.ostering.com/manners/ 2025-08-07T14:55:49+02:00 https://www.ostering.com/media/posts/26/manners.jpg https://www.ostering.com/mitigating-third-party-component-risk/ 2026-03-23T11:39:03+01:00 https://www.ostering.com/media/posts/52/TM_Deps_Feature2.jpg https://www.ostering.com/media/posts/52/Screenshot-2026-03-19-at-11.11.21-2.png =3972x2228 "libhunt.com" https://www.ostering.com/media/posts/52/category_vs_feature_level_discovery.svg =680x520 "Category vs Feature-Level Discovery Diagram" https://www.ostering.com/media/posts/52/feature_level_pipeline.svg =680x580 "Feature-Level Alternative Discovery Pipeline" https://www.ostering.com/media/posts/52/dependency_swap_combined.svg =680x420 "Cost-Benefit Example" https://www.ostering.com/media/posts/52/dependency_swap_evaluation_flow.svg =680x540 "The Mitigation Process" https://www.ostering.com/media/posts/52/sbom_graph_dual_mode_architecture.svg =680x500 "SBOM-Graph Dual-Mode Architecture" https://www.ostering.com/ostering/ 2025-08-05T21:46:39+02:00 https://www.ostering.com/media/posts/15/ostering.jpg https://www.ostering.com/owasp-application-security-awareness-campaigns/ 2025-08-27T10:47:00+02:00 https://www.ostering.com/media/posts/9/top_ten_blog_teaser.jpg https://www.ostering.com/page/2/ https://www.ostering.com/page/3/ https://www.ostering.com/privacy-policy-for-wwwosteringcom/ 2025-08-07T11:41:10+02:00 https://www.ostering.com/programming-language-peculiarities-java-wat/ 2025-08-06T11:29:33+02:00 https://www.ostering.com/media/posts/28/coffee-66850_640.jpg https://www.ostering.com/programming-language-peculiarities-javascript-wat/ 2025-08-07T14:55:34+02:00 https://www.ostering.com/media/posts/29/code-583073_1280.jpg https://www.ostering.com/python3-notes/ 2025-08-06T11:43:35+02:00 https://www.ostering.com/media/posts/23/python.jpg https://www.ostering.com/saml-single-sign-on-with-jboss-wildfly-and-picketlink/ 2025-08-07T14:57:01+02:00 https://www.ostering.com/media/posts/17/saml_jboss.jpg https://www.ostering.com/saml-single-sign-on-with-tomcat-and-picketlink/ 2025-08-07T15:01:46+02:00 https://www.ostering.com/media/posts/18/woman-163426_1920.jpg https://www.ostering.com/sast-vs-claude-code-security-a-deep-dive/ 2026-02-23T11:55:56+01:00 https://www.ostering.com/media/posts/48/SAST_vs_Claude.jpeg https://www.ostering.com/media/posts/48/exploit_poc.jpeg =1344x768 "Exploit POC" https://www.ostering.com/security-misnomers/ 2025-08-05T21:47:01+02:00 https://www.ostering.com/media/posts/19/airport_control-2.jpg https://www.ostering.com/software-engineering-has-regressed-50-years-since-ai/ 2026-04-02T09:56:04+02:00 https://www.ostering.com/media/posts/55/se_regression.jpg https://www.ostering.com/media/posts/55/se_regression_timeline.png https://www.ostering.com/media/posts/55/development_vs_engineering.png https://www.ostering.com/media/posts/55/orchestrator_agent_skills.png https://www.ostering.com/media/posts/55/eight_step_engineering_process.png https://www.ostering.com/software-engineering-security-culture/ 2025-08-27T15:36:47+02:00 https://www.ostering.com/media/posts/36/mold.png https://www.ostering.com/media/posts/36/acme_sec.png =1024x1024 "Aww but that's not fun!" https://www.ostering.com/media/posts/36/the_other_team_arent_doing_it.png =1024x1024 "Not exactly leading by example" https://www.ostering.com/media/posts/36/existed_already.png =1024x1024 "If it's broken why fix it?" https://www.ostering.com/media/posts/36/ramshackle.png =1024x1024 "Yeah that'll work!" https://www.ostering.com/media/posts/36/history_repeating.png =1024x1024 "Déjà Vu" https://www.ostering.com/media/posts/36/monument.png =1024x1024 "Commemorating the ... incident" https://www.ostering.com/media/posts/36/clean-house.png =1024x1024 "Reflections on Clean Code: Why Isn’t This the Norm Everywhere?" https://www.ostering.com/media/posts/36/appsec_ratio.png =1024x1024 "The ratio of appsec engineers to software engineers is frightening" https://www.ostering.com/media/posts/36/budget.png =1024x1024 "Too few people and too few resources" https://www.ostering.com/media/posts/36/appsec-racing.png =1024x1024 "AppSec toys have arrived" https://www.ostering.com/talks/ 2025-08-19T18:32:30+02:00 https://www.ostering.com/threat-modeling-culture/ 2025-09-21T15:13:43+02:00 https://www.ostering.com/media/posts/37/image-4.png https://www.ostering.com/media/posts/37/threat_modeling.png =1024x1024 "Feature Express" https://www.ostering.com/media/posts/37/post-releast-tm.png =1024x1024 "Threat Modeling Too Late" https://www.ostering.com/media/posts/37/without-tm.png =1024x1024 "Exponential Vulnerability Backlog Growth" https://www.ostering.com/media/posts/37/design-phase-tm.png =1024x1024 "Threat Model Early" https://www.ostering.com/media/posts/37/with-tm.png =1024x1024 "Vulnerability Utopia" https://www.ostering.com/threat-modeling-gameplay-with-eop/ 2025-10-12T18:51:54+02:00 https://www.ostering.com/media/posts/1/eop_book.jpg https://www.ostering.com/threat-modeling-remotely-with-miro-and-eop/ 2026-02-21T11:37:15+01:00 https://www.ostering.com/media/posts/34/miroverse_threat_modeling_with_eop.png https://www.ostering.com/media/posts/34/convert_to_jira_issue_dialog.png https://www.ostering.com/threat-modeling-your-dependencies/ 2026-03-19T11:38:11+01:00 https://www.ostering.com/media/posts/51/TM_Deps_Feature1.jpg https://www.ostering.com/media/posts/51/vulnerability_cascade_propagation.svg https://www.ostering.com/media/posts/51/dependency_graph_score_propagation.svg https://www.ostering.com/media/posts/51/effective_score_calculation.svg https://www.ostering.com/three-brass-monkeys/ 2025-08-06T09:58:15+02:00 https://www.ostering.com/media/posts/22/ThreeBrassMonkeys.jpg https://www.ostering.com/usually/ 2025-08-06T11:33:42+02:00 https://www.ostering.com/media/posts/25/usually.jpg https://www.ostering.com/why-sast-is-broken/ 2026-02-23T11:43:47+01:00 https://www.ostering.com/media/posts/47/sast.jpg https://www.ostering.com/media/posts/47/sqli.JPG =2752x1536 "Invisible Taint" https://www.ostering.com/media/posts/47/duplicates.JPG =2752x1536 "Duplicate Hell" https://www.ostering.com/media/posts/47/context.JPG =2752x1536 "Path Traversal" https://www.ostering.com/your-sbom-data-has-been-gathering-dust-until-now/ 2026-03-09T18:27:30+01:00 https://www.ostering.com/media/posts/50/sbom-graph-logo.jpeg https://www.ostering.com/media/posts/50/Screenshot-2026-03-04-at-21.16.20-2.png https://www.ostering.com/media/posts/50/Screenshot-2026-03-04-at-22.14.45.png https://www.ostering.com/media/posts/50/Screenshot-2026-03-04-at-21.15.46.png https://www.ostering.com/media/posts/50/Screenshot-2026-03-04-at-21.15.56.png https://www.ostering.com/media/posts/50/Screenshot-2026-03-04-at-21.15.06.png https://www.ostering.com/media/posts/50/Screenshot-2026-03-04-at-21.15.29.png https://www.ostering.com/media/posts/50/Screenshot-2026-03-04-at-21.23.29.png https://www.ostering.com/media/posts/50/Screenshot-2026-03-04-at-21.23.58.png https://www.ostering.com/media/posts/50/Screenshot-2026-03-04-at-21.23.51.png https://www.ostering.com/media/posts/50/Screenshot-2026-03-09-at-11.54.38.png https://www.ostering.com/media/posts/50/Screenshot-2026-03-09-at-16.32.23.png https://www.ostering.com/media/posts/50/Screenshot-2026-03-04-at-21.16.40.png