Java Posse #144 - Interview with Brian Chess from Fortify Software

Interview with Brian Chess from Fortify Software Fully formatted shownotes can always be found at http://javaposse.com Brian is Chief Scientist and co-founder of Fortify Software and gave us an interview all about internet security, and the possibility of using static analysis to catch security problems only. Fortify Software homepage http://www.fortifysoftware.com/ http://www.fortifysoftware.com/products/ Brian's personal homepage http://www.vantuyl.com/chess/ The book - Secure Programming with Static Analysis http://www.amazon.com/dp/0321424778 Static Analysis http://en.wikipedia.org/wiki/Static_code_analysis Findbugs http://findbugs.sourceforge.net/ Other static analysis tools http://en.wikipedia.org/wiki/List_of_tools_for_static_code_analysis Buffer Overflow exploit http://en.wikipedia.org/wiki/Buffer_overflow Cross Site Scripting (XSS) http://en.wikipedia.org/wiki/Cross_site_scripting SQL Injection http://en.wikipedia.org/wiki/SQL_injection Wikipedia list of common vulnerabilities http://en.wikipedia.org/wiki/Security_vulnerability Thanks Libsyn.com - http://www.libsyn.com - for hosting and bandwidth Brice Ruth and Webprojkt.com - http://webprojkt.com - for our archives site - http://archives.javaposse.com Feedburner.com - http://www.feedburner.com - for feed redirect Kirsty Doherty, Oliver Widder and Amy Ehmann for Java Posse artwork Brian Ehmann - the Java Posse intern Craig Muth for maintaining the Java Posse Memorizable site - http://memorizable.org/Java_Posse Theme Music: Opening - "Java" the parody song Copyright 1997 Broken Records and Marjorie Music Publ. (BMI), written and performed by Loose Bruce Kerr of the Dr. Demento Show and Sun Microsystems attorney. Based on the WWI popular song, "Ja-da." Ukelele style on the recording taught to Bruce by his dad. Re-produced with kind permission from "Loose" Bruce Kerr - http://loosebrucekerr.libsyn.com Closing - Juan Carlos Jimenez - In the House (Intro No. 1) To contact us: Visit our homepage - http://javaposse.com Post on our Google Group - http://groups.google.com/group/javaposse Or send us email - [email protected]