Developer security advocate Secure Code Warrior (SCW) has launched what it claims is the industry’s first benchmark designed to quantify the security competence of its customers’ software developer ...

The secure coding movement got a little boost today as CERT and Fortify Software announced that they have teamed up to automate part of the process of building security into software -- specifically, ...

When you're looking to lock down applications, securing the underlying code has to be one of your cornerstones. To that end, the Computer Emergency Response Team's (CERT) Secure Coding Initiative (SCI ...

The world as we know it is comprised of layers upon layers of carefully connected technology, found in everything from international banks and local community owned shops to wireless doorbells and ...

The digital realm in 2024 is more connected than ever before, but with that connectivity comes increased risk. Cyberattacks are becoming more sophisticated, targeting vulnerabilities in web ...

This standard outlines the practices necessary for secure application development and administration at the University at Buffalo, ensuring the protection of its information technology resources.

GrammaTech, Inc., a leading manufacturer of source-code analysis tools, today announced that the next version of CodeSonar will support the secure coding rules developed by US-CERT. The coding ...

While connected systems have brought easier monitoring, upgrading and enhancement, they’ve also presented more vulnerable attack surfaces. Defending against such attacks can be tough. Applying ...

A collection of articles to help you understand efforts to work security into products from the very beginning of development. For many years now, we’ve heard the experts preach about the need for ...

Growing concerns regarding security drive today’s software system design. For connected systems, it’s no longer enough to choose both a software process standard and a programming standard that focus ...