Making a move
I have been writing a monthly column on computer security and software security since October 2004. In the beginning, the column appeared in Network magazine. Later, that magazine was eaten by IT Architect. Here’s a set of pointers to those early articles:
- Who Should Do Security? (October 2004)
- Application Security Testing Tools: Worth the Money? (November 2004)
- How Do Real Bad Guys Break Software? (December 2004)
- Innovative Rootkits: The Ultimate Weapon? (January 2005)
- Are We In a Computer Security Renaissance? (February 2005)
- Where Does Trust Come From? (March 2005)
- Is Your Mac Really More Secure? (April 2005)
- How Does Security Fit With Engineering? (May 2005)
- Are Cell Phones the Next Target? (June 2005)
- Is Penetration Testing a Good Idea? (July 2005)
- Is VoIP Secure Enough For Prime Time? (August 2005)
- Is Cisco Naked? (September 2005)
- How Bad Is Intrusion Detection? (October 2005)
- Is Security Really About Getting Nothing Done? (November 2005)
- When Does Security Cross the Line? (December 2005)
- Is Sony BMG Run By Malicious Hackers? (January 2006)
- Is Application Security Training Worth the Money? (February 2006)
- How Flawed Is Microsoft? (March 2006)
We all know what’s happening to magazines and newspapers, though, don’t we–they’re turning to bits. When CMP killed IT Architect magazine (along with most of the rest of their paper publications), they repurposed much of the content into websites. I started writing for darkreading.com from the very beginning. Here’s a set of pointers to the darkreading articles:
- Microsoft’s Missed Opportunity (May 3, 2006)
- New Terrorist Profile: Phone Users (June 13, 2006)
- If You Build It, They’ll Crash It (July 7, 2006)
- Google is Evil (August 4, 2006)
- Keep Your Laws Off My Security (September 7, 2006)
- Diebold Disses Democracy (October 9, 2006)
- Boarding-Pass Brouhaha (November 2, 2006)
- Foxy Vista Henhouse (December 11, 2006)
- Hurray for Hollywood!? (January 12, 2007)
- Security’s Symbiosis (February 27, 2007)
- Compliance As Kick-Starter (March 12, 2007)
- Want Turns to Need (April 20, 2007)
- Certifiable (May 9, 2007)
- JSON, Ajax & Web 2.0 (June 7, 2007)
- Consolidate This (July 12, 2007)
- The Ultimate Insider (August 14, 2007)
- Mobile Insecurity (September 14, 2007)
- Online Games & the Law (October 11, 2007)
- Beyond the PCI Band-Aid (December 10, 2007)
- Software Security Strategies (January 9, 2008)
- The Truth Behind Code Analysis (February 13, 2008)
Just recently, I decided to move my monthly column to informIT. The readership is much larger, and I like the affiliation with the company who publishes my books. As part of that move, you can also expect to see Silver Bullet syndicated through informIT as well. You can help me make the move a success by keeping up with my column through informIT. (We’re also planning an RSS feed for articles too, so watch for that as well.)
The first column for informIT is just as much about business as it is about technology. One of the issues we constantly face at Cigital is the problem of helping our customers sell the idea of software security best practices up the chain. A common (and misguided) view is that software security best practices increase development time and add cost. As you can see in my first column, that’s simply not true. Here’s a pointer:
Software [In]security: Paying for Secure Software
I’m very much interested in your feedback on my column and any suggestions you have for topics. Feel free to use the forum below to get in touch. Thanks for reading!