ACT III: Reality Sinks In (Read Act I & Act II) THE SOUND of typing can be heard and then suddenly a loud groan of disappointment. DEV LEAD Argggggggggggggggg!!! FADE IN: INT. CORPORATE OFFICE THE DEV LEAD is looking at his bug queue in HP Quality Center, the bug count is 6,894 defects, all assigned to him. [...]
The Comedy and Tragedy of Automated Security Source Code Analysis – Act III
November 5th, 2010 § 0 comments § permalink
The Comedy and Tragedy of Automated Security Source Code Analysis – Act II
October 11th, 2010 § 5 comments § permalink
ACT II: The Deception (Read Act I Here) FADE IN: WIDE SHOT — The server room, filled with blinking lights and racks of servers. We PAN and FOCUS in on the back of the SALES ENGINEER who is typing away at a terminal. A DEV LEAD sits nearby, looking bored. SALES ENGINEER’S POV — The [...]
The Comedy & Tragedy of Automated Security Source Code Analysis
September 23rd, 2010 § 2 comments § permalink
The other day I was asked about how one might integrate Veracode’s application security analysis solution into their nightly software build process. I get this question all the time because it is a popular idea among automated source code analysis tools and the common sense tells you that it’s one of the best ways to [...]