MSDN Architecture Webcast: Using Security Code Reviews to Quickly and Effectively Improve the Security of Your Applications (Level 200)  

Security code reviews can play a critical role in improving the quality of an application. However, performing such reviews is not an easy task. This webcast begins with a discussion of who should perform the security code review and how the process should be managed, especially when dealing with millions of lines of code. We define the major categories of vulnerabilities, show you what to look out for, and describe how to go about identifying issues using threat modeling. The difference between flaws and bugs is explained, and potential countermeasures are discussed at both tactical and technology-specific levels. We also provide a brief overview of the automated tools available to help with code reviews.

Presenter: Rudolph Araujo, Principal Software Security Consultant, Foundstone Professional Services, A Division of McAfee

Rudolph Araujo is a senior software security consultant at Foundstone, a division of McAfee. Rudolph is responsible for the threat modeling and security code review service lines, as well as the content creation and training delivery for Foundstone’s Building Secure Software and Writing Secure Code – ASP.NET and C++ classes. He is an experienced developer and has authored several network security utilities available on the Foundstone Web site. Rudolph holds a master degree from Carnegie Mellon University with a focus on information security. 

Questions? Feedback? Use Webcast Contact Us