Yearly Archives: 2012

Post: Talking with SANS About Remediation

I recently had the opportunity to speak with the folks at the SANS Institute about some of the software remediation statistics we’ve released. We’ve been saying for a while that software vulnerability remediation is the next big problem in the application and software security space. Finding vulnerabilities isn’t the problem – fixing them is. And it […]

Post: Come See Denim Group at OWASP BeNeLux 2012 in Leuven, Belgium

I’ll be headed to OWASP BeNeLux 2012 in Leuven, Belgium to do a day of training and give a presentation. Looking forward to catching up with OWASP folks, eating some Belgian chocolate and drinking some Belgian beer. Thursday November 29th, 2012 I’ll be giving a one-day version of our “Running a Software Security Program on Open Source […]

Post: OWASP AppSecUSA Recap: Security Intelligence, Software Security Programs and ThreadFix

As we posted here before, all the folks at Denim Group were really looking forward to OWASP AppSecUSA in Austin, TX last week. The Austin crew did not disappoint – I believe there were 750-800 attendees and too many great presentations to count. I’m really looking forward to catching up on a couple that I missed […]

Post: Austin PMI Recap: Software Security for Project Managers: What Do You Need to Know?

Tuesday of last week – in the midst of the craziness of OWASP AppSecUSA – I had the opportunity to break away and speak to the Austin PMI chapter. They’ve got a good-sized group in Austin and I had a lot of fun presenting – lots of energy and great questions from the attendees.     Slides from […]

Post: Denim Group in the Media: Cloud Migration, Mobile App Security and App Logging

By Lauren Madrid It’s been a busy few weeks around here, and Denim Group has been quoted in a few articles recently. Over at TechTarget, Dan Cornell is participating in the Ask the Expert series, answering questions about security. A recent question deal with migrating applications or hardware to the cloud. Check out “Migrating legacy applications to a […]

Post: Only at Black Hat – A Hearty Congrats to Black Hat 2012 and Recommendations for Black Hat 2013

By John Dickson Once again, the impossible has been made possible in the security industry. Congratulations to General Manager Trey Ford, Founder Jeff Moss, and the entire organizing crew for Black Hat 2012 who made this year’s event another hard act to follow. Instead of filling out the bubble chart feedback form, I opted to provide […]