Interview with Brian Chess from Fortify Software

Fully formatted shownotes can always be found at http://javaposse.com

Brian is Chief Scientist and co-founder of Fortify Software and gave us an interview all about internet security, and the possibility of using static analysis to catch security problems only.

• Fortify Software homepage
• http://www.fortifysoftware.com/
• http://www.fortifysoftware.com/products/
• Brian's personal homepage
• http://www.vantuyl.com/chess/
• The book - Secure Programming with Static Analysis
• http://www.amazon.com/dp/0321424778
• Static Analysis
• http://en.wikipedia.org/wiki/Static_code_analysis
• Findbugs
• http://findbugs.sourceforge.net/
• Other static analysis tools
• http://en.wikipedia.org/wiki/List_of_tools_for_static_code_analysis
• Buffer Overflow exploit
• http://en.wikipedia.org/wiki/Buffer_overflow
• Cross Site Scripting (XSS)
• http://en.wikipedia.org/wiki/Cross_site_scripting
• SQL Injection
• http://en.wikipedia.org/wiki/SQL_injection
• Wikipedia list of common vulnerabilities
• http://en.wikipedia.org/wiki/Security_vulnerability

Thanks

• Libsyn.com - http://www.libsyn.com - for hosting and bandwidth
• Brice Ruth and Webprojkt.com - http://webprojkt.com - for our archives site - http://archives.javaposse.com
• Feedburner.com - http://www.feedburner.com - for feed redirect
• Kirsty Doherty, Oliver Widder and Amy Ehmann for Java Posse artwork
• Brian Ehmann - the Java Posse intern
• Craig Muth for maintaining the Java Posse Memorizable site - http://memorizable.org/Java_Posse
• Theme Music:
  • Opening - "Java" the parody song Copyright 1997 Broken Records and Marjorie Music Publ. (BMI), written and performed by Loose Bruce Kerr of the Dr. Demento Show and Sun Microsystems attorney. Based on the WWI popular song, "Ja-da." Ukelele style on the recording taught to Bruce by his dad. Re-produced with kind permission from "Loose" Bruce Kerr - http://loosebrucekerr.libsyn.com
  • Closing - Juan Carlos Jimenez - In the House (Intro No. 1)
    

• To contact us:
  • Visit our homepage - http://javaposse.com
  • Post on our Google Group - http://groups.google.com/group/javaposse
  • Or send us email - javaposse@gmail.com