Interview with Brian Chess from Fortify Software
Fully formatted shownotes can always be found at http://javaposse.com
Brian is Chief Scientist and co-founder of Fortify Software and gave us
an interview all about internet security, and the possibility of using
static analysis to catch security problems only.
- Fortify Software homepage
- http://www.fortifysoftware.com/
-
http://www.fortifysoftware.com/products/
-
Brian's personal homepage
-
http://www.vantuyl.com/chess/
-
The book - Secure Programming with Static Analysis
-
http://www.amazon.com/dp/0321424778
-
Static Analysis
-
http://en.wikipedia.org/wiki/Static_code_analysis
-
Findbugs
-
http://findbugs.sourceforge.net/
-
Other static analysis tools
-
http://en.wikipedia.org/wiki/List_of_tools_for_static_code_analysis
-
Buffer Overflow exploit
-
http://en.wikipedia.org/wiki/Buffer_overflow
-
Cross Site Scripting (XSS)
-
http://en.wikipedia.org/wiki/Cross_site_scripting
-
SQL Injection
-
http://en.wikipedia.org/wiki/SQL_injection
-
Wikipedia list of common vulnerabilities
- http://en.wikipedia.org/wiki/Security_vulnerability
Thanks
- Libsyn.com - http://www.libsyn.com - for hosting and bandwidth
- Brice Ruth and Webprojkt.com - http://webprojkt.com - for our archives site - http://archives.javaposse.com
- Feedburner.com - http://www.feedburner.com - for feed redirect
- Kirsty Doherty, Oliver Widder and Amy Ehmann for Java Posse artwork
- Brian Ehmann - the Java Posse intern
- Craig Muth for maintaining the Java Posse Memorizable site - http://memorizable.org/Java_Posse
-
Theme Music:
- Opening - "Java" the parody song Copyright 1997 Broken Records and
Marjorie Music Publ. (BMI), written and performed by Loose Bruce Kerr
of the Dr. Demento Show and Sun Microsystems attorney. Based on the WWI
popular song, "Ja-da." Ukelele style on the recording taught to Bruce
by his dad. Re-produced with kind permission from "Loose" Bruce Kerr - http://loosebrucekerr.libsyn.com
- Closing - Juan Carlos Jimenez - In the House (Intro No. 1)
-
To contact us:
- Visit our homepage - http://javaposse.com
- Post on our Google Group - http://groups.google.com/group/javaposse
- Or send us email - javaposse@gmail.com