Web Security Testing Cookbook

The Web Security Testing Cookbook has been nominated for an Automation Honors Award by ATI (automated testing institute). Vote for it on their voting page.

The Add N Edit Cookies add-on for Firefox is a vital one for web security testing, but it tends to be maintained sporadically. The current version downloadable from addons.mozilla.org will tell you that it does not support Firefox 3.5...

For those of you incorporating static source code analysis into your software security testing, NIST has a special division that bears watching. SAMATE is the Software Assurance Metrics And Tool Evaluation group...

I recently read Ari Takanen's Fuzzing for Software Security Testing and Quality Assurance. This is a valuable book on fuzz testing, and timely.

My friends over at Sticky Minds picked up a UPI article about Norm Coleman's campaign office being hacked into. It's a summary of an original article in The Hill. For many years we've been fighting this knee-jerk security reaction that if it's a "security" issue, it must be a "firewall" issue...

The Wall Street Journal ran a story about Gary McGraw's Building Security In Maturity Model (BSIMM). This model, which is free to download and use, aims to help organizations put security into all aspects of their software development lifecycle...

The Wall Street Journal ran a story about Gary McGraw's Building Security In Maturity Model (BSIMM). This model, which is free to download and use, aims to help organizations put security into all aspects of their software development lifecycle...

I read a blog entry about "re-aligning training expectations for QA." It has some useful points that both developers and so-called "security people" need to hear...

I read a blog entry about "re-aligning training expectations for QA." It has some useful points that both developers and so-called "security people" need to hear...

Over the last three years, Silver Bullet listeners and sc-l subscribers have occasionally asked Gary McGraw to interview more "practitioners." Instead of changing the mission of Silver Bullet, he decided to create a new podcast and focus it exclusively on practical software security...

Paco uploaded two new videos that you can watch from the book's Facebook page. They demonstrate how to use Firebug to do some harmless cheating in a couple Facebook games: WordTwist and Pirates, both by Zynga.