Blogs about: Information Security Economics

Featured Blog

The Future : Regulation is Futile - Market Forces Will Prevail6 comments

mcurphey wrote 2 months ago: 39,000 ft over yet another ocean …… I just watched an old Bill Joy talk from Ted 2006 via iTunes. Tw … more →

Tags: Software development, Security industry, Security 2.0, software security, Royal Holloway ISG, Security Metrics, Open-Source, Second-Life, Information Security

Series of Static Analysis Posts1 comment

mcurphey wrote 6 months ago: If you haven’t downloaded it here (or here if you run 64 bit) and run it against your .NET cod … more →

Tags: ACE Team, CISG, Microsoft, software security

The World Has Started to Slope Backwards

mcurphey wrote 6 months ago: ‘….A few months ago, a major Bangalore-based infotech company lost out on a $8 million c … more →

Tags: espionage, hacking, Security industry

CAT.NET and Anti-XSS 3.0 Released for Free2 comments

mcurphey wrote 6 months ago: We have just released a free static analysis tool for .NET and the open source Anti-XSS 3.0 library … more →

Tags: ACE Team, CISG, Microsoft, Open-Source, Software development, software security, Web Security, Working at Microsoft

ISO Security Standards - JTC27 Trip Report

mcurphey wrote 8 months ago: If you are interested in following what’s happening in the ISO Security Standards world, you c … more →

Beautiful Security1 comment

mcurphey wrote 8 months ago: I am currently writing a chapter for a new O’Reilly book called Beautiful Security. You can pr … more →

Tags: Software development, Security industry, software security, OWASP, social networking, Books, Security Book Reviews

Enigma - Crypto for Kids1 comment

mcurphey wrote 8 months ago:   Brilliant! http://blog.wired.com/geekdad/2008/10/enigma-crypto-c.html … more →

Consumer Application Security or Enterprise Application Security ?

mcurphey wrote 8 months ago: When Linus Torvalds wrote about the security circus he echoed a lot of the sentiment I have felt for … more →

Tags: Software development, Security industry, software security, Web Security, Technology Commentary

NSA Posts Secrets to Writing Secure Code - Write at 38 LOC Per Day5 comments

mcurphey wrote 8 months ago: The National Security Agency has released a case study showing how to cost-effectively develop code … more →

Tags: Software development, software security, Security Metrics, Open-Source

OWASP CISO Panel5 comments

mcurphey wrote 8 months ago: I didn’t go to OWASP NYC (put off by the vulnerability circus to be brutally honest) but I jus … more →

Tags: Security industry, OWASP, Web Security, Open-Source, Information Security

Security Technology UX

mcurphey wrote 8 months ago: I just can’t wait until security technology has UX as good as this It maybe Hollywood fan … more →

Tags: long tail security, Security Platforms, Software development, software security, ux

SecurityNow

mcurphey wrote 8 months ago: We have just posted the first of a series of articles about a proof of concept called SecurityNow t … more →

Tags: long tail security, Microsoft, platforms, Security Platforms

Michael Smiths Penetration Testing Blogs1 comment

mcurphey wrote 8 months ago: A no-real value add post from me (sorry) but Michael Smiths articles on the Evolution of Penetration … more →

Is Spam Porn for the Security Industry?

mcurphey wrote 8 months ago: We have all heard stories (urban myths?) about how the porn industry has driven technology from earl … more →

Are Business Risk and Technical Security Part of a Natural Fourier Series?2 comments

mcurphey wrote 8 months ago: Decade after decade politics moves from regulated economies to de-regulated economies. Changes are u … more →

Tags: Certification, Compliance, long tail security, regulation, Security industry

MI6 Terror Suspects Pictures Found on eBay Camera

mcurphey wrote 9 months ago: The types of data breaches in the UK never seize to amaze me. If you ever need proof that security i … more →

Tags: Security industry, spies, Spying

Justin Somaini is Blogging

mcurphey wrote 9 months ago: My good friend Justin Somaini the CSO of Symantec is now blogging! … more →

Gazza on the Software Security Market1 comment

mcurphey wrote 9 months ago: Really good article by my pal Gazza (here). Some highlight’s include; All told, the software … more →

Tags: Security industry, software security, Web Security

Are You a Builder or a Breaker21 comments

mcurphey wrote 9 months ago: I am reading Brain Rules; great book! In the opening chapter there is a wonderful quotation from an … more →

Tags: long tail security, OWASP, Productivity, Security 2.0, social networking, Software development, software security, Technology Commentary, Web Security


Have your say. Start a blog.

See our free features →

Related Tags
All →

Follow this tag via RSS

Find other items tagged with “information-security-economics”:
Technorati Del.icio.us IceRocket