Securosis – Building a Web Application Security Program

November 20, 2008

I continue to be amazed at how many similarities of previous work/lives people have in the security world. I was talking to Rich Mogull at BlackHat a few years ago and found out that he worked on exactly the same touring shows in the US that I had back in Europe. Now I find out that he got into webappdev pretty much the same way I did – weird!

In any case, I find this out because the guys at securosis are starting a series of posts on "building a web application security program". Part 1 is out now, and although it’s just the introduction (so no real "meat" in this one, but you have to kick it off somehow), I know there’s going to be good material as these guys have proved it over and over again.

I’m really looking forward to reading these, and of course I’ll comment back Rich