Dinis Cruz
Dinis Cruz
For example in kibana or other log's solution see pics at https://twitter.com/DinisCruz/status/738856117669875712
see code at https://gist.github.com/DinisCruz/08693ebe5b427998f9425d5c59291919 related to Security Unit Tests concept
Code at https://github.com/DinisCruz/BSIMM-Graphs-QA/blob/65c3430502a8c21dea27e6e7aecf5a043d1abf9b/test/browser/All-Pages.test.coffee ``` coffee Browser_API = require '../../src/_Test_APIs/Browser-API' Http_API = require '../../src/_Test_APIs/Http-API' async = require 'async' describe.only 'browser | All-Pages', -> browser = null http = null before ()->...
Great presentation and data: https://twitter.com/jeremiahg/status/733820429438091264 Review and use to support arguments, specially on the insurance part which is relevant to https://github.com/DinisCruz/Book_Software_Quality/blob/e2adcca13ce7068bbe741f86d835b8efbc36b138/manuscript/17.Software-insurance.md
From twitter: - additionally, it feels like the deck only addresses the appsec issue w/ yet to be written code and doesn’t help w/ legacy code. - and finally, it’s...
https://github.com/DinisCruz/Book_Software_Quality/blob/master/content/4.SecDevOps/8.Security-Champions.md
4.Pair-programming-with-my-self.md https://github.com/DinisCruz/Book_Software_Quality/blob/master/content/22.Diagrams/4.Pair-programming-with-myself/4.Pair-programming-with-my-self.md
https://github.com/DinisCruz/Book_Software_Quality/blob/master/content/22.Diagrams/5.Test-execution-and-lack-of-visibility/5.Test-execution-and-lack-of-visibility.md
from https://github.com/DinisCruz/Book_Software_Quality/blob/059d1db3190ddc7f1f175271d633d3291363f911/content/21.From-Audio/From-Audio.md ![image](https://cloud.githubusercontent.com/assets/656739/15231176/78217e92-1891-11e6-979d-6b58f2b97c4b.png) to https://github.com/DinisCruz/Book_Software_Quality/blob/master/content/4.SecDevOps/8.Security-Champions.md ![image](https://cloud.githubusercontent.com/assets/656739/15231196/950083a0-1891-11e6-9d2d-c1e9e32e7ecb.png)
which is the idea of connecting multiple threat models together (use it instead of Attack Trees) note: on the topic of TM , see "Threat Modeling 101: Ten Common Traps...