Web Admin Blog

Real Web Admins. Real World Experience.

Entries for the ‘Metrics’ Category

The OWASP Security Spending Benchmarks Project

Nov.13, 2009 in Metrics, OWASP AppSec DC 2009 Leave a Comment

This presentation was by Boaz Belboard, the Executive Director of Information Security for Wireless Generation and the Project Leader for the OWASP Security Spending Benchmarks Project.  My notes are below: It does cost more to produce a secure product than an insecure product. Most people will still shop somewhere, go to a hospital, or enroll […]

Tags: , , , ,

Application Security Metrics from the Organization on Down to the Vulnerabilities

Nov.13, 2009 in Metrics, OWASP AppSec DC 2009 Leave a Comment

This presentation was by Chris Wysopal, the CTO of Veracode.  My notes are below: “To measure is to know.” – James Clerk Maxwell “Measurement motivates.” – John Kenneth Galbraith Metrics do Matter Metrics quantify the otherwise unquantifiable Metrics can show trends and trends matter more than measurements do Metrics can show if we are doing […]

Tags: , , , , ,
  

Welcome to WebAdminBlog!

This blog site is run by Josh Sokol, the Founder and CEO of SimpleRisk, a free tool for Governance, Risk Management, and Compliance. Josh is a former Web Admin and Information Security Program Owner of National Instruments.