Cody has been a lifelong student of application security ever since finding his first 2 UNIX exploits at the age of 13. Cody’s passion is making a positive impact upon the world by helping to reduce true risk by helping organizations ensure that secure software is a product of normal modern software delivery. Cody has worked with many of Veracode’s largest customers to develop world-class application security programs attesting to the security of tens of thousands of applications. When Cody is not talking about application security, he enjoys being with his family, boating, open water/ice fishing, hiking, guitar, or working on a home improvement project.
One of the top security concerns we hear from technology leaders is about the security of open source software (OSS) and cloud software development. An open source vulnerability scanner (for scanning OSS) helps you discover risk in the third-party code you use. However, just because a solution…
In today’s world, the importance of incorporating web application security best practices cannot be overstated. Recent studies show that web applications are the top attack vector in nearly 80% of incidents. The good news is DevOps processes lend themselves to integrated security practices. …
If you’re helping shape application security in an organization, whether as an external security consultant or vendor, or as part of an internal security team, it is critical to work effectively with developers.
While a lot of individuals have an interest and stake in security, and many have a…
When it comes to engaging developers for a successful application security program, it is helpful to understand the types of developers you are working with. While of course each developer is a unique individual, there are some common personas I have come across in my work with development teams.…
As a developer, DevOps engineer, Infrastructure & Operations lead, or similar, you are on the frontlines of application security. You are also on the frontlines of performance, functionality, stability, user experience…the list goes on. Often it seems like security is just one more requirement…
