The Art of Software Security Assessment

About: jm

Full Name

John McDonald

Website

http://taossa.com/

Details

John McDonald is a senior consultant with Neohapsis, where he specializes in advanced application security assessment across a broad range of technologies and platforms. He has an established reputation in software security, including work in security architecture and vulnerability research for NAI (now McAfee), Data Protect GmbH, and Citibank. As a vulnerability researcher, John has identified and helped resolve numerous critical vulnerabilities, including issues in Solaris, BSD, Checkpoint FireWall-1, OpenSSL, and BIND.

Posts by jm:

• 13 Oct 2008 Bugs vs. Flaws

• 10 Jan 2008 Type 0×47 IGMPv2 Ownership Request

• 26 Feb 2007 More errata than sendmail

• 07 Jan 2007 CERT Secure Coding Standards

• 28 Dec 2006 Signed bit-fields

• 26 Dec 2006 Stored Procedure SQL Injection Cheat Sheet

• 20 Dec 2006 The Vault

• 15 Dec 2006 Spreekt u Nederlands?

• 05 Dec 2006 Copy editors are scary

• 05 Dec 2006 By “synonymous,” I meant “I’m an idiot”

— Next Page »