Comments for noFUD - No Fear Uncertainty or Doubt http://nofud.org Information security analysis by Akshay Aggarwal Wed, 23 Feb 2011 20:46:58 +0000 hourly 1 http://wordpress.com/ Comment on Two Security Startups To Keep An Eye On by News From the Chicagoland Entrepreneurial Center :: TINC Magazine http://nofud.org/2011/02/08/two-security-startups-to-keep-an-eye-on/#comment-207 Wed, 23 Feb 2011 20:46:58 +0000 https://nofud.wordpress.com/?p=109#comment-207 [...] announcing the close of their $1 million Series A round on 2/4, and was featured on the noFud blog highlighting security startups to watch on [...]

]]> Comment on Secure your Facebook password by Secure your Facebook password » Akshay Aggarwal http://nofud.org/2011/01/28/secure-your-facebook-password/#comment-199 Fri, 28 Jan 2011 21:08:55 +0000 https://nofud.wordpress.com/2011/01/28/secure-your-facebook-password/#comment-199 [...] Read more… Posted by Akshay Aggarwal at 9:08 pm [...]

]]> Comment on Advanced Persistent Threat (APT): Real or just hype? by akshay aggarwal http://nofud.org/2011/01/11/advanced-persistent-threat-apt-real-or-just-hype/#comment-198 Wed, 26 Jan 2011 08:25:03 +0000 https://nofud.wordpress.com/2011/01/11/advanced-persistent-threat-apt-real-or-just-hype/#comment-198 They represented major financial, energy, technology and manufacturing customers.

]]> Comment on Advanced Persistent Threat (APT): Real or just hype? by Chris http://nofud.org/2011/01/11/advanced-persistent-threat-apt-real-or-just-hype/#comment-190 Sat, 15 Jan 2011 15:45:58 +0000 https://nofud.wordpress.com/2011/01/11/advanced-persistent-threat-apt-real-or-just-hype/#comment-190 Which industries did those 20 CSOs represent?

]]> Comment on The McAfee Way: Don’t follow it!! by Lucy http://nofud.org/2010/04/25/the-mcafee-way-dont-follow-it/#comment-123 Tue, 22 Jun 2010 15:33:42 +0000 https://nofud.wordpress.com/2010/04/25/the-mcafee-way-dont-follow-it/#comment-123 I am part of a company that was barely effected by the false positive fiasco and comments and reactions like yours distress me. Why is no responsibility placed onto the IT teams in place at the companies who are not evaluating prior to pushing out updates??? There is a reason Evaluation and Production are two separate locations. If everyone just assumed that everything produced is 100% and nothing can go wrong we would have no need for warranties. Evaluate THEN Replicate.

]]> Comment on Baking Security In: A Comic Strip View of SDL by Kurt Mills http://nofud.org/2009/02/19/baking-security-in-a-comic-strip-view-of-sdl/#comment-98 Fri, 24 Apr 2009 16:17:30 +0000 http://nofud.wordpress.com/2009/02/19/baking-security-in-a-comic-strip-view-of-sdl/#comment-98 Checkout all the strips here.

http://www.microsoft.com/security/bakingsecurityin/strips.htm

]]> Comment on Shrinking Budgets: Application Security Tools vs Process Tradeoff by Shrinking Budgets: Application Security Tools vs Process Tradeoff | Coded Style http://nofud.org/2010/05/10/shrinking-budgets-application-security-tools-vs-process-tradeoff/#comment-97 Tue, 21 Apr 2009 18:54:17 +0000 http://nofud.wordpress.com/2009/04/10/shrinking-budgets-application-security-tools-vs-process-tradeoff/#comment-97 [...] Unlike most managers, Alok reached out for advice. Read more… [...]

]]> Comment on Akshay’s Uncertainty Principle: Observing Some Metrics Changes Them by Topics about Economy » Archive » Akshay’s Uncertainty Principle: Observing Some Metrics Changes Them http://nofud.org/2010/09/24/akshays-uncertainty-principle-observing-some-metrics-changes-them/#comment-87 Tue, 24 Mar 2009 18:06:32 +0000 http://nofud.wordpress.com/2009/03/24/akshays-uncertainty-principle-observing-some-metrics-changes-them/#comment-87 [...] noFUD – No Fear Uncertainty or Doubt placed an observative post today on Akshayâ [...]

]]> Comment on Baking Security In: A Comic Strip View of SDL by Abby http://nofud.org/2009/02/19/baking-security-in-a-comic-strip-view-of-sdl/#comment-86 Tue, 24 Mar 2009 05:35:59 +0000 http://nofud.wordpress.com/2009/02/19/baking-security-in-a-comic-strip-view-of-sdl/#comment-86 Its interesting to see how large corporations try to break down tough messages like security into small bite size pieces.

]]> Comment on Application Security Development Lifecycle 5A: Is Threat Modeling Right For You? by Phil Agcaoili http://nofud.org/2008/06/14/application-security-development-lifecycle-5a-is-threat-modeling-right-for-you/#comment-79 Mon, 09 Mar 2009 06:57:13 +0000 http://nofud.wordpress.com/2008/06/14/application-security-development-lifecycle-5a-is-threat-modeling-right-for-you/#comment-79 Hey Akshay.

What’s interesting for us is where Threat Modeling worked and did not work.

We struggled to show success and ROSI for IT engagements, only obtaining 1-2 serious architectural and/or approach flaws using Threat Modeling. The environment is much more stable and there are more knowns, so TM seemed too trivial for some of our IT dev teams.

For our Product development and Software as a Service offerings (SaaS or Cloud Computing), Threat Modeling is at the core of what we do to ensure sound architecture and fundamentals to each of these areas.

Glad to see the tool is updated as well. We have been plodding along using Word/Visio templates for our Threat Models and hoping the tool works better for us this go around.

Thanks,

Phil Agcaoili

]]>