SECCOM Labs logo
Resources for Secure
Software Engineering
from Security Compass

Security Scenarios

By Tom Aratyn on April 20, 2009, about: security scenarios

So you’ve learned the basics of application security. What happens next? Ongoing education isn’t as clear cut as taking a single course. Nothing beats real world experience, but not everyone has the luxury of time to ramp up on application security experiences.

Security scenarios are modeled after the Harvard Business Review Case Studies - they’re real world scenarios based on actual challenges faced by practitioners on the ground. Each scenario describes a fictional predicament faced by somebody involved in application security. The scenario ends with a challenge: what would you do in this situation? We supplement the scenario with expert opinions from within Security Compass and real world practitioners in industry.

Our first scenario involves Jamie Rockhill – a fictional Manhattan information security information practitioner who faces a growing set of application security threats while battling a severe financial downturn. Our founder Nish Bhalla and SANS instructor Jason lam weigh in with their opinions.


Hacking Access Me

By Tom Aratyn on April 16, 2009, about: Developers, Other Platforms, Security, exploit-me

The Exploit Me For Fun and Profit presentation at SecTor was a great chance to let even more people know about the exciting Exploit Me work being done at Security Compass. Unfortunately there wasn’t quite enough time to give a full overview on how to hack Access Me to implement new evaluation methods so we’re presenting that information here.

Read More…