SEARCH RESULTS
 
Showing 1-4 of 4 records
1
 
Expand article

Fuzz Testing at Microsoft and the Triage Process

2007-09-20 18:52:00 by sdl in The Security Development Lifecycle
 
...triaged (reviewed) by the tester to determine if a bug needs to be filed. When fuzzing over a period of time however, we might generate hundreds of exceptions and it becomes a very labor-intensive process to sift through all of them. What we needed was a way to ease the burden placed on the tester To that extent, the mini-debugger was...
 
 
 
 
 
Expand article

"Crawling" Toward SDL

2008-03-06 22:13:00 by sdl in The Security Development Lifecycle
 
...Triage Process provides some good guidance on how to think through what type(s) of fuzzing to exercise against your application If you choose to expand beyond fuzz testing, I would point you back to James article on the broader topic of Testing in SDL . You may come to the conclusion that expanded security testing may come later in your walk...
 
 
 
 
 
Expand article

Cyber Espionage

2008-04-28 06:45:35 by schneier in Schneier on Security
 
...triage. The effort got serious last summer when top military brass discreetly summoned the chief executives or their representatives from the 20 largest U.S. defense contractors to the Pentagon for a "threat briefing." BusinessWeek has learned the U.S. government has launched a classified operation called Byzantine Foothold to detect, track,...
 
 
 
 
 
Expand article

Q&A with Doug McClure: What Makes BSM Successful?

2008-07-15 19:02:39 by Julia Lim in ScienceLogic
 
...triage and resolve problems based on a simple business service or application contextual understanding. Focus on how this changes the game within your environment. Come up with your own metrics and measures to assess the value this has to this organizational use. Trust me, youll need to justify your investment some time in the future Another...
 
 
 
 
 
 
Showing 1-4 of 4 records
1
 
TOP SEARCH
Expand / MinimizeClose Widget
  •  
RECENT SEARCH
Expand / Minimize
  •  
RELATED VIDEO
Expand / Minimize
SecurityRatty FAQ
Sergey Zarubin, 31yo
CISSP, CCSP
Moscow, Russia