Tag: static analysis

  • Vegas, baby! Iron Chef Black Hat

    Draft posted August 14. Substantially revised August 17. The second of a two-part series on the Black Hat USA 2008 security conference. Back when we lived in San Francisco in the 1990s, we were huge fans of Fuji TV’s Iron Chef, then shown with subtitles on a local cable station. When local chef Ron Siegel…

  • A bumper crop o’ Slashdot security threads

    In RSA: “It feels like something’s missing” earlier this week, I mentioned that I found myself wondering whether what I was seeing at the show responded to security problems as experienced by users. Coincidentally enough, when I checked Slashdot today there were several of interesting security-related threads. So while it’s far from a statistically-valid sample,…

  • RSA, part 2: static analysis

    A continuation of RSA: “It feels like something’s missing” RSA’s a tough show for static analysis companies, but several were there. Ounce had the largest booth and an excellent message (“listen to your code”); Veracode, Armorize, and Fortify had smaller presence. However, I didn’t actually spend much time at the booths or looking at the…