Welcome to the ASG site.  Dedicated to discussions and commentary on the world of software insecurity and information security.

The growth in application security is obvious despite the current economic climate; More and more effort is being focused on the application layer as opposed to the infrastructure layer. I also see early adoption of secure application development practices in local organisations to Ireland such in verticals from  Financial Services to Pharma.

Software Security:  Key Organisations and roadmap merchants

Frameworks such as  (OWASP’s) SAMM (Software Assurance Maturity Model) and verification methodologies such as OWASP’s ASVS (Application Security Verification Standard) are providing approaches and methodologies for assessing software quality and security – a great sign of a maturing discipline. There is also an increase in demand in greybox/360 testing (source code review coupled with penetration testing) which makes me happy such that the penetration and patch model of security is rapidly declining.

Browse Timeline

• » Ounce Labs acquired by IBM

Comments ( 1 Comment )

Add a Comment