Software Development

The existence of a security vulnerability in a system does not itself constitute anomalous or unintended behavior. Just because a vulnerability exists, doesn’t mean it can or will be exploited. Maybe 17 other things have to align before Little Bobby Tables comes a’calling. Rather, a vulnerability is…

In my last epistle, I started exploring risk and vulnerability as properties of bugs, and concluded that security issues, functional defects and usability bugs can often be lumped together. I said we need to look at the risk associated with a bug, not just its mere existence before we decide to…