Dinis Cruz

For example in kibana or other log's solution see pics at https://twitter.com/DinisCruz/status/738856117669875712

see code at https://gist.github.com/DinisCruz/08693ebe5b427998f9425d5c59291919 related to Security Unit Tests concept

Explain 'check entire attack surface' test

1

Code at https://github.com/DinisCruz/BSIMM-Graphs-QA/blob/65c3430502a8c21dea27e6e7aecf5a043d1abf9b/test/browser/All-Pages.test.coffee ``` coffee Browser_API = require '../../src/_Test_APIs/Browser-API' Http_API = require '../../src/_Test_APIs/Http-API' async = require 'async' describe.only 'browser | All-Pages', -> browser = null http = null before ()->...

Great presentation and data: https://twitter.com/jeremiahg/status/733820429438091264 Review and use to support arguments, specially on the insurance part which is relevant to https://github.com/DinisCruz/Book_Software_Quality/blob/e2adcca13ce7068bbe741f86d835b8efbc36b138/manuscript/17.Software-insurance.md

Address Jeremiah Grossman feedback

1

From twitter: - additionally, it feels like the deck only addresses the appsec issue w/ yet to be written code and doesn’t help w/ legacy code. - and finally, it’s...

remove duplicated content from Security Champions page

1

https://github.com/DinisCruz/Book_Software_Quality/blob/master/content/4.SecDevOps/8.Security-Champions.md

Improve image for 4.Pair-programming-with-my-self.md

1

4.Pair-programming-with-my-self.md https://github.com/DinisCruz/Book_Software_Quality/blob/master/content/22.Diagrams/4.Pair-programming-with-myself/4.Pair-programming-with-my-self.md

https://github.com/DinisCruz/Book_Software_Quality/blob/master/content/22.Diagrams/5.Test-execution-and-lack-of-visibility/5.Test-execution-and-lack-of-visibility.md

from https://github.com/DinisCruz/Book_Software_Quality/blob/059d1db3190ddc7f1f175271d633d3291363f911/content/21.From-Audio/From-Audio.md  to https://github.com/DinisCruz/Book_Software_Quality/blob/master/content/4.SecDevOps/8.Security-Champions.md 

which is the idea of connecting multiple threat models together (use it instead of Attack Trees) note: on the topic of TM , see "Threat Modeling 101: Ten Common Traps...