
Merry New Year
Merry New Year to all. Here’s to even better software security in 2008.
As many of you know, I have a podcast called “The Silver Bullet Security Podcast with Gary McGraw.” The premise of the podcast is to interview various security gurus, both from industry and academia. We’ve done some great ones, including Ross Anderson, Bruce Schneier, and John Stewart.
For episode 21 of the podcast, I interviewed the Cigital principals…the very people who (supposedly) produce this blog. You can download the podcast here.
We’ve also made a transcript of the show available in pdf form.
During the show we talk plenty about some of the lessons we’ve learned about enterprise software security from our work with customers. We also compare and contrast the Touchpoints, CLASP, and Microsoft’s SDL.
While you’re surfing for multi-media, you might get a kick out of this Merry New Year message from Silver Bullet.

