Software Engineering Security Culture
We need to fix the culture, from top to bottom in the software engineering industry. Here are just some of the issues as I see them and what we should be doing about them.
Tagged in: AppSec (2)
Application Security is More than Just Pen Testing
So often organizations believe that Application Security stops at penetration testing and fixing vulnerabilities but it is more than that, penetration testing is the reactive side of things but you also need the proactive aspects of Application Security to reduce the flow.
Browse all Topics
- Accountability
- Agentic AI
- AI
- AI Security
- Application Security
- AppSec
- Artificial Intelligence
- Auth
- Awareness
- Binary
- CAPEC
- Change
- Claude Code Security
- Clean House
- Compliance
- Cryptography
- Culture
- Cursor AI
- Cybersecurity
- Dark Patterns
- DevSecOps
- Elevation of Privilege
- Games
- Graph Analysis
- GSSCredential
- HttpClient
- HttpComponents
- Inner-Source
- Java
- JavaScript
- JBoss
- Kerberos
- languages
- Leadership
- learning
- Miro
- Mitre
- Model Context Protocol
- Origins
- Osteria
- OWASP
- Ownership
- PicketLink
- Post Quantum Cryptography
- Posters
- Privacy
- Privacy by Design
- Python
- Responsibility
- Risk
- Running
- SAML
- SAST
- SBOM
- Secure by Design
- Security
- Security by Design
- Security Maturity
- SLSA
- Social Engineering
- Software Architecture
- Software Design
- Software Development
- Software Engineering
- Source Code
- SSL
- SSO
- Strategy
- STRIDE
- Supply Chain Security
- Threat Modeling
- Tomcat
- Top 10
- TRIM
- Wildfly