programming

Redefining the role of security in software development

January 16, 2017

Software is becoming increasingly important for market success, driving an ever greater need for speed in the development process. The rapid adoption of DevOps is testimony to …

Project Springfield: Cloud-based fuzz testing for uncovering million-dollar bugs

September 27, 2016

This Moday Microsoft debuted Project Springfield, a cloud-based fuzz testing (aka fuzzing) service that the company has been working on for a quite a while. David Molnar and …

Fresh Bluetooth Developer Toolkit line tackles IoT security, interoperability

September 22, 2016

The Bluetooth Special Interest Group (SIG) released several updates to its developer toolkit line-up, which enables developers to build smarter when creating things like …

Connected devices riddled with badly-coded APIs, poor encryption

September 19, 2016

The advent of home automation and rapid rise of smart home connected devices is seeing some vendors and new startups scramble to become a part of the movement, with ABI …

Linux kernel development: How fast it’s going and who is doing it

August 23, 2016

The Linux Foundation analyzed the work done by over 13,500 developers over more than a decade, to provide insight into the Linux kernel development trends and methodologies …

Build serverless, secure apps in the cloud

August 15, 2016

Swirlds released the SDK for the hashgraph distributed consensus platform, which is free for download (the registration fields are optional). This software development …

Flawed code hooking engines open endpoints to compromise

July 19, 2016

Six common security issues stemming from the incorrect implementation of code hooking and injection techniques have been unearthed by EnSilo researchers in over 15 different …

Microsoft creates Checked C extension to prevent common coding errors

June 16, 2016

Fixing vulnerabilities in completed software and systems is all good and well, but with Checked C, an extension for the C programming language, Microsoft researchers want to …

How programmers can be tricked into running bad code

June 15, 2016

Are programming language package managers vulnerable to typosquatting attacks? And can these attacks result in software developers running potentially malicious code? The …

Improving software security through a data-driven security model

May 31, 2016

The current software security models, policies, mechanisms, and means of assurance are a relic of the times when software began being developed, and have not evolved along …

OWASP set to address API security risks

May 23, 2016

OWASP has started a new project and is set to publish a new guide on security risks. The issue they aim to tackle this time is API security. The new OWASP API Security Project …

How developers fight the rise in web application attacks

May 19, 2016

Recent reports highlight the challenge faced by developers in securing code as attacks against web applications increase, while security budgets for developers remain low, …