Roger's Security Blog

Browse by Tags

Common Criteria and answering the “real” questions: It seems that I am not yet gone J . Eric Bidstrup, a colleague of mine, wrote a great blog post about Common Criteria, where it does a pretty good job and where it fails. Basically he claims – and I could not agree more – that the customer "only" wants Read More...
Posted 28 December 07 12:08 by rhalbh | 0 Comments
Filed under Security, Trends, Processes, Industry Associations
The Value of Operating System Comparisons: Since Blaster/Slammer, namely since the start of Trustworthy Computing I am working at Microsoft in a publically facing security role. I went through all the blaming and had to take all the heat of what we did wrong and how bad we are – and I admitted Read More...
Posted 16 November 07 10:05 by rhalbh | 10 Comments
Filed under Security, Processes, Industry Associations
SAFECode: Writing Secure Code – learning from each other: During RSA Europe an industry forum called SAFECode ( S oftware A ssurance F orum for E xcellence in C ode) was announced " to identify and share software assurance best practices, promote broader adoption of such practices into the cyber ecosystem, and Read More...
Posted 02 November 07 12:30 by rhalbh | 3 Comments
Filed under Security, Policy, Microsoft, Processes, Industry Associations

Chat directly with me if you want. Go to my About page to find a web messenger!