February 2009 - Following the White Rabbit Blog

Following the White Rabbit Blog

Syndication

Archives

Sort by: Most Recent | Most Viewed | Most Commented

Enterprise Web Application Security: Part 1 - The Foundation

The term " Enterprise Web Application Security Program " has been evolving. Generally referring to a corporate IT program which includes web application code in some way and has traditionally meant either a white-box approach or a black-box...

Published 02-20-2009 3:10 PM by RafalLos

Filed under: web application security, enterprise web application security program
An Unfortunate Case of Learned Behavior

One of my all-time favorite quotes is " When all you have is a hammer, the whole world is a nail "... but lately that quote has started to apply to the practice of web application security programs, and that's causing me to start losing...

Published 02-10-2009 4:25 PM by RafalLos

Filed under: program failures, program secrets, web application security program
Defining Security as a Business Requirement

This post is a follow-up to the previous one on QA: Defect vs. Vulnerability. All the highly-intelligent responses I received got me thinking further, and so here I present my additional thoughts. This may not be revolutionary - but given the response...

Published 02-05-2009 4:53 AM by RafalLos

Filed under: functional specification, quality, process, application security, web application security business case, software quality, software security, QA
QA Lesson - Defect vs. Vulnerability

Back in April 2008 one of my very first posts to this blog was titled " Security Vulnerability != Defect; Why? " and it stirred some discussion. Over the past year I've spoken to more QA teams than I can probably remember, and the message...

Published 02-03-2009 8:34 PM by RafalLos

Filed under: terminology, QA

Powered by Community Server (Non-Commercial Edition), by Telligent Systems

Information disclosed in this community becomes public. Exercise caution when deciding to disclose your personal information. HP reserves the right, but is not obligated to, edit or remove your comment if it contains personally identifiable information or other content HP deems unacceptable. Opinions expressed are your personal opinions or those of the original authors, and not of HP. Please see HP's web Terms of Use for more details.

Privacy statement | Using this site means you accept its terms

February 2009 - Following the White Rabbit Blog

Syndication

Recent Posts

Tags

Archives

Enterprise Web Application Security: Part 1 - The Foundation

An Unfortunate Case of Learned Behavior

Defining Security as a Business Requirement

QA Lesson - Defect vs. Vulnerability