Neil DuPaul

Neil is a Marketing Technologist working on the Content and Corporate teams at CA Veracode. He currently focuses on Developer Awareness through strategic content creation. In his spare time you'll find him doting over his lovely wife and daughter. He is a Co-Owner of CrossFit Amoskeag in Bedford NH, his favorite topic is artificial intelligence, and his favorite food is pepperoni pizza.
Posts by Neil DuPaul

A Glimpse Into Hackathon 2012

August 7, 2012

The 2012 CA Veracode Hackathon officially kicked off this morning and while most of our coverage of the event will come later this week and next week I wanted to give everyone that was curious a quick glimpse into the event. The event starts over a free breakfast of donuts and bagels and while participants are welcomed t-shirts are also distributed (pink was especially popular among the men.)... READ MORE

AppSec Weekly News Roundup 8/3/2012

August 3, 2012

Dropbox Email Spamming: Posted by Aditya Agarwal in the Dropbox blog, a post titled “Security update & new features,” addresses user complaints about spam they were receiving at email addresses they only used for Dropbox. The investigation unveiled that, “usernames and passwords recently stolen from other websites were used to sign in to a small number of Dropbox accounts.” They went on to... READ MORE

Secure Development Awards: Q&A With the Winners

July 31, 2012

Earlier today we announced the winners of our first ever Secure Development Awards. For those that haven't heard of our new awards this quote from our Co-Founder Chris Wysopal sums it up nicely; "We’ve created this award to recognize developers’ successes in properly implementing security features during the software development lifecycle. Historically, security professionals used scanning and... READ MORE

Black Hat 2012: Best Giveaways and Booths

July 26, 2012

CA Veracode’s remedy for the Application Security headache is in full swing at the Black Hat Conference. Swing by the booth (#229) and you can pick up an “I Great Giveaways: Light-up Ninja Swords by Lancope The marketing folks at Lancope are offering something every security ninja needs in their arsenal; a plastic samurai sword. These were so popular that Lancope ran out within a few hours of... READ MORE

AppSec Weekly News Roundup 7/23/2012

July 20, 2012

Don't forget the basics: Cloud Security - Five Lessons from the Yahoo Password Breach by Srinivasan Sundara Rajan. The Yahoo breach "is not really due to the adoption of Cloud or a multi-tenant model rather from not following the age-old best practices." What were these best practices? Among them are not encrypting at a database level, not using the best features of your database, not masking... READ MORE

SDLC Best Practices: Security Integration

July 17, 2012

Best Practices Around Integrating Security Into the SDLC Secure coding is a challenge that every software company in the world faces. Even the largest companies that attract the best developers in the world (Read: Google, Facebook) have had instances of vulnerabilities in their code ranging from XSS to SQL injection to backdoors. The software industry is the world's largest manufacturing... READ MORE

Building Secure Web Applications Infographic

June 5, 2012  | Secure Development

Neglecting to take proper security measures at the application layer is one of the most common causes of data breaches, yet many companies still leave their applications unprotected. Securing your applications begins with developer training on the risks applications face and the methods required for vulnerability prevention. This infographic focuses on defining these risks and combating common... READ MORE

What is OWASP? Guide to the OWASP Application Security Top 10

April 25, 2012  | Intro to AppSec 3

Every vibrant technology marketplace needs an unbiased source of information on best practices as well as an active body advocating open standards. In the Application Security space, one of those groups is the Open Web Application Security Project (or OWASP for short). OWASP operates as a non-profit and is not affiliated with any technology company, which means it is in a unique position to... READ MORE

What is a Buffer Overflow? | CA Veracode

April 10, 2012

Now and again we present short educational briefings on topics related to Application Security. Last time we discussed Data Breaches, read more here. Today I will present a brief overview of Buffer Overflows. A Buffer overflow is a common software coding mistake. In order to effectively mitigate buffer overflow vulnerabilities, it is important that you first understand what buffer overflows are,... READ MORE

Love to learn about Application Security?

Get all the latest news, tips and articles delivered right to your inbox.

 

 

 

contact menu