http://www.securityninja.co.uk Security research, news and guidance Mon, 23 Jan 2012 08:29:38 +0000 hourly 1 http://wordpress.org/?v= http://www.securityninja.co.uk/blog/comment-page-1/#comment-11422 Hack In Paris 2011 | Segmentation fault Fri, 24 Jun 2011 09:26:35 +0000 http://www.securityninja.co.uk/?page_id=1898#comment-11422 [...] the security code review Swiss army knife. David Rook expose sa vision de la revue de code : il ne s’agit pas de lire le maximum de lignes de code [...] [...] the security code review Swiss army knife. David Rook expose sa vision de la revue de code : il ne s’agit pas de lire le maximum de lignes de code [...]

]]> http://www.securityninja.co.uk/blog/comment-page-1/#comment-11029 BSidesLondon Wrap Up « /dev/random Thu, 21 Apr 2011 00:31:41 +0000 http://www.securityninja.co.uk/?page_id=1898#comment-11029 [...] David Rook presented his tool: “Agnitio: its static analysis, but not as we know it”. He introduced the concept of static analysis: review applications security without executing it. It can be performed manually or via tools (automated). Classic error: security issues are fixed too late in the SDLC process and cost a huge amount of money! A nice comparison was done between developers and drivers: What if we taught drivers in the same way as developers? Instructors will tell driver about the different ways to crash and inevitably the driver will crash! Then David switched to a deeper presentation of his tool “Agnitio“: [...] [...] David Rook presented his tool: “Agnitio: its static analysis, but not as we know it”. He introduced the concept of static analysis: review applications security without executing it. It can be performed manually or via tools (automated). Classic error: security issues are fixed too late in the SDLC process and cost a huge amount of money! A nice comparison was done between developers and drivers: What if we taught drivers in the same way as developers? Instructors will tell driver about the different ways to crash and inevitably the driver will crash! Then David switched to a deeper presentation of his tool “Agnitio“: [...]

]]>