You can't bug fix your way out of the vulnpocalypse
Explores the concept of a 'vulnpocalypse' where new tech like AI finds massive vulnerabilities, arguing systemic fixes beat patching one-by-one.
Explores the concept of a 'vulnpocalypse' where new tech like AI finds massive vulnerabilities, arguing systemic fixes beat patching one-by-one.
A framework for categorizing security engineering work into four key buckets: prevention, detection, damage reduction, and work generation.
A critique of past and present security tools, arguing for better collaboration between security and software engineers to create usable security.