Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:




dailydave logo Dailydave mailing list archives

Beyond Best Practices
From: dave <dave () immunitysec com>
Date: Mon, 21 Jun 2004 10:31:27 -0400

I've updated the Immunity resources page with the slidepack for the OWASP talk I gave yesterday. Feel free to bag on it here.

One thing that really gets to me is when people use the IBM "paper" on finding and fixing bugs in the design cycle as a marketing and sales pitch. "Vulnerabilities are 1000000 times easier to fix in design, etc". That paper is hugely old, and isn't about security. Everyone needs to stop quoting from it as if it meant something. The more people quote from it, the more it gains an air of legitimacy, which it really shouldn't have.

Thanks,
Dave Aitel
VP Marketing and Sales
Immunity, Inc.

_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
http://www.immunitysec.com/mailman/listinfo/dailydave


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]