Dave Ferguson is a Principal Solutions Architect & AppSec SME at Veracode. He has worked in application security exclusively for the last 17 years after an initial career as a developer. Dave holds CISSP and CSSLP certifications and past roles include working as a Principal Consultant at FishNet Security (now Optiv), leading the global AppSec program at Sabre Corporation, and directing the Web Application Security product line at Qualys.
Early in my career, I developed web applications. At the time there were practically no frameworks or libraries to help. I was coding with Java using raw servlets and JSPs – very primitive by today's standards. There was…
