The Art of Software Security Assessment

About: justin

Full Name

Justin Schuh

Website

http://taossa.com/

Details

Justin Schuh is an Information Security Engineer at Google. As a member of the Google Chrome Team, Justin works on client side and browser security concerns. Previously, Justin worked as a security researcher at IBM Internet Security Systems X-Force, and led the Application Security Practice at Neohapsis Inc. Prior to his work in the private sector, Justin spent nearly a decade in computer security activities at the Department of Defense (DoD) and related federal agencies. His government service includes a role as a lead researcher with the National Security Agency (NSA) penetration testing team–the Red Team.

Posts by justin:

• 26 Nov 2008 An Interesting Mozilla Exploit

• 22 Feb 2008 Our Dojo At CanSecWest

• 10 Jan 2008 Browser Security Gets Even More Confusing (Cross-site Request Draft)

• 15 Apr 2007 Spot the Vuln: Bored Games

• 17 Feb 2007 Same-Origin Policy Part 2: Server-Provided Policies?

• 08 Feb 2007 Same-Origin Policy Part 1: Why we’re stuck with things like XSS and XSRF/CSRF

• 03 Feb 2007 Discounts and Death Bunnies

• 14 Jan 2007 Updates for January 14, 2007

• 19 Dec 2006 Fun With Impersonation

• 05 Dec 2006 HANDLE with care

— Next Page »