@RuggedSoftware

I recognize that my code will be used in ways I cannot anticipate, in ways it was not designed, and for longer than it was ever intended.

 Hopefully, everywhere.
ruggedsoftware.org
Joined February 2010
  • Tweets586
  • Following14
  • Followers653
70Media
this announcement is a game changer for #DevSecOps and #rugged. Security vulnerabilities have been the Achilles heel of #OSS because maintainers have struggled to find and fix the bugs. No more. @monkchips @jhammond @joshcorman @wickett github.blog/2020-09-30-code-…

Code scanning is now available!

Now available, code scanning is a developer-first, GitHub-native approach to easily find security vulnerabilities before they reach production.

github.blog
3
4
15
Some approaches I've seen recently are @swagitda_ and @nicolefv D.I.E, Rugged by @RuggedSoftware, DoD's Enterprise DevSecOps Reference Design and STPA-SafeSec introducing safety thinking into #CyberSecurity engineering. Any other valuable frames you're aware of ? #wardleymaps
Mario Platt@madplatt25 Sep 2019
Replying to @madplatt
1
4
1
4
Can’t wait to read this blog!
Mario Platt@madplatt15 Nov 2019
buff.ly/2CJWIL4 Chinese dualism of attack&defence meets @RuggedSoftware doesn’t make insecure software something that the Devs are to blame or the security team fails to assure. Insecure software is a symptom, not a cause. #cybersecurity
1
1
1
Thoughts? Just found this 12-line #TechPledge techpledge.org h/t @MightyCasey Reminiscent of @RuggedSoftware Manifesto
1
1
4
Just learned about the #RuggedManifesto (@ruggedsoftware) reading the chapter on #infosec in @nicolefv, @jezhumble and @RealGeneKim's "Accelerate". "I'm rugged, and more importantly, my code is rugged." Amusing but also thought provoking. Not the first great find in "Accelerate".
3
3
I'm doing some research for the DevSecOps Handbook due out next year. If you work with Devops, Cyber, ITSec and/or Information Security could you please fill out this survey. Thanks - surveymonkey.com/r/8GSCTYW - PLS RT
5
91
14
76
Best quote! "I am a nice security professional, not a mindless vulnerability spewing machine. If I am to change this image, I must first change myself. Developers are friends, not fools." @matt_tesauro @AppSecEU @owasp #DeveloperLove
1
56
12
120
See my just prior RT/QT... xitter.cf/joshcorman/status/9871…
Josh Corman ♘@joshcorman20 Apr 2018
I know... let’s re-name BBQ -> BarbSecQue... right?
1
1
Replying to @joshcorman
@joshcorman @RealGeneKim @gojkoadzic Some of the ideas I've discussed with each of you here ... aws.amazon.com/blogs/enterpr…

Building a Culture of Security | Amazon Web Services

It is no longer sufficient to leave security to a team of specialists who watch over the enterprise’s risk posture and control it through a set of constraining policies. It is not enough to guard the...

aws.amazon.com
4
5
Q: What the heck does DevOps have to do w/ Gov Policy? (and/or you?) A: That’s why you gotta watch! :) xitter.cf/AllDayDevOps/status/92…
All Day DevOps@AllDayDevOps24 Oct 2017
15 Minute Warning (Gov/Fed): DevOps, Government Policy, and You - Joshua Corman (@joshcorman). Watch here 👉🏻 bit.ly/2hZaMp6
1
3
1
6
Last year’s #AllDayDevOps was great. This one has grown like crazy… All day today… xitter.cf/joshcorman/status/9228…
Josh Corman ♘@joshcorman24 Oct 2017
Me @ 10:30 ET today: #AllDayDevOps 2017: "DevOps, Government Policy, and You” alldaydevops2017.sched.com/e…
1
2
New track announced for #AllDayDevOps: DevOps in #Government. Hear from #DevOps leaders transforming the government bit.ly/2uPFHgW
3
1
3
Why Rugged Matters in the Dev, Sec, and Ops Discussion bit.ly/2tjXhE4 /cc @joshcorman @devsecops @wickett
4
2
3
Join us today at the North America #IMVC17 –Our keynote interview by @joshcorman will start in 20 min bit.ly/2jjnPVL
1
1
Our #IMVC17 afternoon keynote with @joshcorman talking security and #devops at 16.50 EDT 29/3 bit.ly/2ijWM8o @Infosecuritymag
2
We aim to encompass all of the SDL, but interesting framing - we are more Development 1st. xitter.cf/pareeksiddharth/status…
Siddharth Pareek
@pareeksiddharth21 Mar 2017
#Rugged #DevOps is more developer-focused, while #SecDevOps is more operations-focused @RuggedSoftware DevSecOps lnkd.in/fViyCXR
1
1
Josh Corman, Where Bits and Bytes Meets Flesh and Blood - DevOps, Cybers... youtu.be/Fv4uZxNgqKM via @YouTube
1
Recommend the Rugged DevOps ebook for all #devops folks since I first read it last year slideshare.net/evidentio/e-b…
2
4
Replying to @joshcorman
@joshcorman reminds me once again to review the Rugged Manifesto and during his talk at @DevOpsConnect last month youtube.com/watch?v=Fv4uZxNg…
2
1
Load more