I was thinking about something that Dave Winer said on the Gillmor Gang
about how the software industry moves forward when small groups (like 1
or 2) of developers get motivated to solve a problem. I was wondering
how this applies to software security, since it seems like a perfect
description for
You seem to be leaving out one of the largest open efforts at security. ISECOM
at
http://www.isecom.org covers
security testing, secure coding, incident response and other security related
topics.
-Original Message-
From: Gunnar Peterson
Date: 4/19/05 6:32 am
To: Secure Coding
Thanks for the feedback and link (as well as to those who have replied off
line). Note, I did not intend that the 5 tools I listed were exhaustive, just
trying to get an idea what works in the field and wanted to get the ball
rolling. Any other candidates out there? Flawfinder, anyone?
-gp