Secure Coding mailing list archives

Insider threats and software

From: gem at cigital.com (Gary McGraw)
Date: Tue, 14 Aug 2007 13:22:08 -0400

Hi sc-l,

My darkreading column this month is devoted to insiders, but with a twist.  In this article, I argue that software 
components which run on untrusted clients (AJAX anyone?  WoW clients?) are an interesting new flavor of insider attack.

Check it out:
http://www.darkreading.com/document.asp?doc_id=131477&WT.svl=column1_1

What do you think?  Is this a logical stretch or something obvious?

gem

company www.cigital.com
podcast www.cigital.com/silverbullet
blog www.cigital.com/justiceleague
book www.swsec.com

Current thread:

Insider threats and software Gary McGraw (Aug 14)
- Insider threats and software silky (Aug 14)
  - Insider threats and software Gary McGraw (Aug 16)
    - Insider threats and software silky (Aug 16)
    - Insider threats and software Paco Hope (Aug 17)
    - Insider threats and software Crispin Cowan (Aug 28)
- Insider threats and software Florian Weimer (Aug 15)
- <Possible follow-ups>
- Insider threats and software Pierre Parrend (Aug 16)
  - Insider threats and software Michael S Hines (Aug 16)
    - Insider threats and software {EOG} Gary McGraw (Aug 16)