Published Articles

	Venture-Funded Consultants at Security Innovation Show Companies How to Make Software Unbreakable Xconomy
	Policy: Where it all Begins for PCI Compliance Chain Store Age
	Six Best Practices for IT Security CIO Update
	Five Biggest Software Security Mistakes Organizations Make CIO Update
	Duct Tape, Band-Aids and Bubble Gum Shouldn’t Be Used to Build Security SearchSoftwareQuality.com
	Designing Security in a Five-Step Action Plan to More Secure Software Financial Times
	What’s the Frequency Kenneth? The Risks and Rewards of RFID CIO Update
	Threat Modeling for the Management of Risk CIO Update
	Finding Your Inner Evildoer for Effective Security Testing Software Test & Performance
	Alone in the Dark: The Perils of Securing Web Services CIO Udpate
	Security Threats: Real Risks, True Protection, Technology Limitations IT Defense
	Scan your Source Code to Locate Weak Spots Early Software Test & Performance
	Why is Application Security So Elusive? CIO Update
	Perspectives: Straw House (a.k.a Flimsy Software) Information Security Magazine
	Why Software Still Stinks CIO Update
	Destabilized Server Load Testing Software Test & Performance
	Understanding Reliability: Measuring IT Pain Points H. Thompson, J. Whittaker
	Warning: Security Storm Brewing Better Software Magazine
	Understanding the Arts of the Adversary Dr. Dobbs Journal
	The Business Case for Software Security Dr. Dobbs Journal
	The Insider, Naivety and Hostility: Security Perfect Storm? QUEUE Magazine
	Rethinking Software Security Dr. Dobbs Journal
	When Format Strings Attack Dr. Dobbs Journal
	Black Box Debugging QUEUE Magazine
	String-Based Attacks Demystified Dr. Dobbs Journal
	Building Software Securely from the Ground Up IEEE Software
	Software's Invisible Users IEEE Software
	Tracking Wild Pointers STQE Magazine
	Security Bugs Exposed H. Thompson, STQE Magazine
	Red-Team Application Security Testing Dr. Dobbs Journal
	Testing for Software Security Dr. Dobbs Journal
	What is Software Testing? And Why is it so Hard? IEEE Software
	Software engineering is not enough IEEE Software
	Toward a More Reliable Theory of Software Reliability IEEE Comp