A Team Playbook for Improving Dynamic Application Security Testing
A practical security engineering field guide to dynamic application security testing, covering risk, implementation, evidence, and team leadership.
Nathan Berg
Operating Dynamic Application Security Testing: Ownership, Evidence, and Exceptions
A practical security engineering field guide to dynamic application security testing, covering risk, implementation, evidence, and team leadership.
Building a Zeek and Suricata Dual Sensor for a Home Lab
A single IDS can only see part of the story. Zeek gives you rich protocol metadata and context, while Suricata provides fast signature and protocol anomaly detection. Running both on a single passi...
Engineering Dynamic Application Security Testing into the Paved Road
A practical security engineering field guide to dynamic application security testing, covering risk, implementation, evidence, and team leadership.
An Architecture Review Playbook for Dynamic Application Security Testing
A practical security engineering field guide to dynamic application security testing, covering risk, implementation, evidence, and team leadership.
Dynamic Application Security Testing: What the Team Must Decide Before Building
A practical security engineering field guide to dynamic application security testing, covering risk, implementation, evidence, and team leadership.
How to Lead a Review of Static Application Security Testing
A practical security engineering field guide to static application security testing, covering risk, implementation, evidence, and team leadership.
Measuring Static Application Security Testing Without Vanity Metrics
A practical security engineering field guide to static application security testing, covering risk, implementation, evidence, and team leadership.
Turning Requirements for Static Application Security Testing into Delivery Guardrails
A practical security engineering field guide to static application security testing, covering risk, implementation, evidence, and team leadership.
Designing Static Application Security Testing: Trust Boundaries, Failure Modes, and Tradeoffs
A practical security engineering field guide to static application security testing, covering risk, implementation, evidence, and team leadership.