Gary McGraw on BSIMM8 and Software Security

Software security pioneer Gary McGraw talks to Mike Mimoso about the latest iteration of the Building Security In Maturity Model BSIMM report. BSIMM is a snapshot of how some of the world’s biggest tech companies and enterprises are handling secure development practices. Gary talks about some of...

Gary McGraw on BSIMM7 and Secure Software Development

Mike Mimoso talks to Cigital CTO and software security pioneer Gary McGraw about the latest results pulled from the Building Security In Maturity Model BSIMM. The framework measures the secure development activities of some of the world’s largest software companies and enterprises and can be used...

Gary McGraw on Software Security and BSIMM6

Mike Mimoso talks to Cigital’s Gary McGraw about software security and analysis from the sixth version of the Building Security in Maturity Model report. Download: garymcgraw102715.mp3 Music by Chris Gonsalves...

Gary McGraw on Scalable Software Security and Medical Device Security

Dennis Fisher talks to Gary McGraw about the challenges of scaling software security programs, the FTC’s security programs, and the current push for better security in medical devices. Download: digitalunderground220.mp3 Music by Chris Gonsalves...

Gary McGraw on BSIMM-V and Software Security

Dennis Fisher talks with Gary McGraw of Cigital about the progress of the BSIMM software security measurement model and how development organizations are addressing the challenges of securing their software. Download: digitalunderground131.mp3...

How I Got Here: Gary McGraw

Dennis Fisher talks with Gary McGraw, CTO of Cigital, about his childhood as a violin prodigy, his early introduction to personal computers with the Apple II, his start in software security and the state of the discipline today. Download: 04garymcgraw.mp3...

Gary McGraw on Cyberwar and the Folly of Hoarding Cyber-Rocks

Dennis Fisher talks with Gary McGraw of Cigital about some of the holes in the current thinking about cyberwar, why traditional military analogies don’t hold up in cyberwar discussions and how better defense can make a difference. McGraw will be discussing his thoughts on cyberwar at King’s Colle...

Gary McGraw on the BSIMM4 and How to Avoid Being the Slowest Zebra

Dennis Fisher talks with Gary McGraw of Cigital about the release of the BSIMM4 data, how software security programs have matured in the last four years and how the government has become distracted by cyberwar and is ignoring software security, to its detriment. Download: digitalunderground105...

Gary McGraw on the BSIMM3 Data Release

Dennis Fisher talks with Gary McGraw of Cigital about the release of the data collected during the BSIMM 3 software security measurement project, the most pressing challenges facing companies involved in software security programs and the reasons that the US government is falling farther behind o...

Gary McGraw on Cyber War, Cyber FUD and Rhetoric

Dennis Fisher talks with Gary McGraw of Cigital about the current climate of FUD and rhetoric surrounding cyber war and cyber espionage, the state of software security in the government and military and the potential need for a software Cash for Clunkers program. Show notes: Cyberwarmongering and...

Gary McGraw on BSIMM2, Software Security and Cargo Cult Science

Dennis Fisher talks with Gary McGraw of Cigital about the release of the BSIMM2 model, the continued maturing of software security programs and the similarities between computer security and cargo cult science. Podcast audio courtesy of Where’s Aubrey. Subscribe to the Digital Underground podcast...

Gary McGraw, Cigital

Like Geer, Gary has a unique view of the security world, one that is informed by his background in cognitive science and philosophy. He just doesn’t come at questions or problems the way that most people do, and that makes for interesting conversations. Gary’s among the top experts on software...

Gary McGraw on Software Security, the BSIMM Model and Critical Thinking

Dennis Fisher talks with Gary McGraw, CTO of Cigital, about the BSIMM security model, the maturation of software security and whether our universities are turning out critical thinkers. Podcast audio courtesy of Where’s Aubrey Download Subscribe to the Digital Underground podcast on...