Re: [SC-L] Perspectives on Code Scanning

2007-06-08 Thread McGovern, James F (HTSC, IT)
In a previous thread someone appropriately commented that perspectives in this space differ depending upon whether you are a software vendor, government customer or enterprise. I do not disagree that developers need to know how to fix their code. What I am saying is that tools to assist develope

Re: [SC-L] What's the next tech problem to be solved in software security?

2007-06-08 Thread Leichter, Jerry
On Thu, 7 Jun 2007, Steven M. Christey wrote: | On Wed, 6 Jun 2007, Wietse Venema wrote: | | > more and more people, with less and less experience, will be | > "programming" computer systems. | > | > The challenge is to provide environments that allow less experienced | > people to "program" compu

Re: [SC-L] What's the next tech problem to be solved in software security?

2007-06-08 Thread ljknews
At 9:53 AM +0200 6/8/07, Stephen de Vries wrote: > On 8 Jun 2007, at 02:23, Steven M. Christey wrote: >> >> More modern languages advertise security but aren't necessarily >> catch-alls. > > At the same time, the improvements in security made by managed code > (e.g. the JRE and .NET runtimes) fo

Re: [SC-L] Perspectives on Code Scanning

2007-06-08 Thread Paolo Perego
On 6/6/07, McGovern, James F (HTSC, IT) <[EMAIL PROTECTED]> wrote: > I really hope that this email doesn't generate a ton of offline emails and > hope that folks will talk publicly. It has been my latest thinking that the > value of tools in this space are not really targeted at developers but sh

Re: [SC-L] What's the next tech problem to be solved in software security?

2007-06-08 Thread Stephen de Vries
On 8 Jun 2007, at 02:23, Steven M. Christey wrote: > > More modern languages advertise security but aren't necessarily > catch-alls. At the same time, the improvements in security made by managed code (e.g. the JRE and .NET runtimes) for example, should not be understated. The fact that apps