Build a Command-Line LLM with Python
Creating your own large language model (LLM) is much easier than it sounds. In this guide you’ll train a small model and wire it into a simple chat interface you can run from any terminal. I’ve al...
Nathan Berg
A Practical Risk Model for Static Application Security Testing
A practical security engineering field guide to static application security testing, covering risk, implementation, evidence, and team leadership.
A Practical Failure Exercise for Security Requirements
A practical security engineering field guide to security requirements, covering risk, implementation, evidence, and team leadership.
Security Requirements in Production: Signals That Show the Control Works
A practical security engineering field guide to security requirements, covering risk, implementation, evidence, and team leadership.
Implementing Security Requirements Without Slowing Delivery
A practical security engineering field guide to security requirements, covering risk, implementation, evidence, and team leadership.
Failure Modes in Security Requirements: A Design-Level Analysis
A practical security engineering field guide to security requirements, covering risk, implementation, evidence, and team leadership.
Defining the Security Outcome for Security Requirements
A practical security engineering field guide to security requirements, covering risk, implementation, evidence, and team leadership.
A Team Playbook for Improving Secure Software Development Lifecycle
A practical security engineering field guide to secure software development lifecycle, covering risk, implementation, evidence, and team leadership.
Operating Secure Software Development Lifecycle: Ownership, Evidence, and Exceptions
A practical security engineering field guide to secure software development lifecycle, covering risk, implementation, evidence, and team leadership.
Cross-Site Scripting (XSS): A Technical Deep Dive
Never trust user input—sanitize and encode to stop cross-site scripting before it reaches the browser. Date: 2025-08-07 1. Overview Cross-Site Scripting (XSS) is a client-side code injection vuln...