An active coderPhilip Nelson - code, ski, pontificateVulnerability management- September 20, 2006 This arrived in my email this morning in the sans-qualys vulnerability alert:"Good news - for a change.For everyone who has ever tried to reduce vulnerabilities, and found itvery hard, today is a very good day. NIST just announced (this morning)that it is launching a cooperative effort involving NSA, DoDDISA, DHS,and the Center for Internet Security, with the help of security andsoftware vendors, to radically upgrade vulnerability management. Theprogram will bring automation and...http://xcskiwinn.org/community/blogs/panmanphil/archive/2006/09/20/4484.aspx SD Best Practices materials are updated- September 19, 2006 I have placed the slides and demo code in an article here from my talk at SD Best Practices in Boston last week. It was a good week and I had lots of interesting talks this year. The conference has continued to change shape since I first started attending back in 1999. This year there was a big emphasis on project and team processes and techniques. This conference also had a C++ track as it's only language track! There was a large number of first class speakers that I really enjoyed getting to..http://xcskiwinn.org/community/blogs/panmanphil/archive/2006/09/18/4481.aspx |