developing secure software
follow
#security
free / libre / open source software (OSS/FLOSS)
follow
#oss
software innovation
follow
#innovation
My Blog
follow
blog/index.html
Presentations
follow
presentations.html
About Site
follow
aboutsite.html
Search Site
follow
search.html
About Me
follow
dwheeler.html
Contact Me
follow
contactme.html
FLOSS Weekly #609!
follow
https://www.dwheeler.com/blog/2020/12/13#floss-weekly-609
Report on the 2020 FOSS Contributor Survey
follow
https://www.dwheeler.com/blog/2020/12/13#2020-foss-contributor-report
Secure Software Development Fundamentals
follow
https://www.dwheeler.com/blog/2020/12/13#secure-software-development-fundamentals
all
follow
https://www.dwheeler.com/blog/index.rss
FLOSS&Open Standards
follow
https://www.dwheeler.com/blog/oss/index.rss
security
follow
https://www.dwheeler.com/blog/security/index.rss
Secure Programming for Linux and Unix HOWTO -- Creating Secure Software
follow
secure-programs/
What laws should be created to improve computer security?
follow
essays/law-security.html
Learning from Disaster
follow
essays/learning-from-disaster.html
Subversion of bootstrap-sass
follow
essays/bootstrap-sass-subversion.html
Shellshock
follow
essays/shellshock.html
How to Prevent the next Heartbleed
follow
essays/heartbleed.html
POODLE attack against SSLv3
follow
essays/poodle-sslv3.html
The Apple goto fail vulnerability: lessons learned
follow
essays/apple-goto-fail.html
Cloud Security: Virtualization, Containers, and Related IssuesSony Pictures, Lax Security, and PasswordsA Sample Security Assurance Case Pattern by David A. Wheeler, December 2018 (external)Securely Using Software Assurance (SwA) Tools in the Software Development Environment by David A. Wheeler and Daniel J. Reddy, IDA Paper P-9166, July 2018 (external)What is open security?[PDF][DOC]flawfinder, a source code scannerSecuring Microsoft Windows (for Home & Small Business Users) Filenames and Pathnames in Shell: How to do it correctlyPresentation: Securing Open Source Software [Editable Slides]*Presentation: Open Source Software and Software Assurance (Security) [Editable Slides]* SCM SecurityCountering Trusting Trust through Diverse Double-Compiling (countering Trojan Horse attacks on Compilers)Regular expression (regex) demoEasier Email Security is on the Way?"Techniques for Cyber Attack Attribution"by David A. Wheeler (Oct 2003)(discusses attacker traceback / source tracking on a TCP/IP-based Internet)(external)
follow
essays/cloud-security-virtualization-containers.html
Sony Pictures, Lax Security, and Passwords
follow
essays/sony-lax.html
A Sample Security Assurance Case Pattern by David A. Wheeler, December 2018
follow
https://www.ida.org/idamedia/Corporate/Files/Publications/IDA_Documents/ITSD/2019/P-9278.pdf
Securely Using Software Assurance (SwA) Tools in the Software Development Environment by David A. Wheeler and Daniel J. Reddy, IDA Paper P-9166, July 2018
follow
https://www.ida.org/idamedia/Corporate/Files/Publications/IDA_Documents/ITSD/2019/P-9166.pdf
What is open security?
follow
essays/open-security-definition.html
[PDF]
follow
essays/open-security-definition.pdf
[DOC]
follow
essays/open-security-definition.doc
flawfinder
follow
flawfinder/
Securing Microsoft Windows (for Home & Small Business Users)
follow
essays/securing-windows.html
Filenames and Pathnames in Shell: How to do it correctly
follow
essays/filenames-in-shell.html
Presentation: Securing Open Source Software
follow
essays/securing-oss.pdf
Editable Slides
follow
essays/securing-oss.odp
Presentation: Open Source Software and Software Assurance (Security)
follow
essays/oss_software_assurance.pdf
Editable Slides
follow
essays/oss_software_assurance.odp
SCM Security
follow
essays/scm-security.html
Countering Trusting Trust through Diverse Double-Compiling (countering Trojan Horse attacks on Compilers)
follow
trusting-trust
Regular expression (regex) demo
follow
misc/regex.html
Easier Email Security is on the Way?
follow
essays/easy-email-sec.html
"Techniques for Cyber Attack Attribution"by David A. Wheeler (Oct 2003)(discusses attacker traceback / source tracking on a TCP/IP-based Internet)
follow
http://handle.dtic.mil/100.2/ADA468859
Open Source Software / Free Software (OSS/FS or FLOSS)
follow
Why OSS/FS? Look at the Numbers! (Paper)
follow
oss_fs_why.html
Why FLOSS? Look at the Numbers! (Presentation)
follow
numbers/
FLOSS is commercial software
follow
essays/commercial-floss.html
How to Evaluate OSS/FS Programs
follow
oss_fs_eval.html
Generally Recognized as Mature (GRAM) OSS/FS Programs
follow
gram.html
Make Your Open SourceSoftware GPL-Compatible. Or Else
follow
essays/gpl-compatible.html
Open Source Software (OSS or FLOSS) and the U.S. Department of Defense (DoD)
follow
essays/oss-dod-overview-2012-08-15.ppt
Government Open Source Released Software
follow
government-oss-released/
Releasing Free/Libre/Open Source Software (FLOSS) for Source Installation
follow
essays/releasing-floss-software.html
FLOSS License Slide
follow
essays/floss-license-slide.html
High Assurance (for Security or Safety) and Free-Libre / Open Source Software (FLOSS)... with Lots on Formal Methods (aka high confidence or high integrity)
follow
essays/high-assurance-floss.html
OSS/FS References
follow
oss_fs_refs.html
What Should Governments Examinein Acquiring COTS Open Source Software (OSS)?
follow
government_oss.pdf
Presentation: Open Source Software and the U.S. Department of Defense (DoD)
follow
essays/dod-oss.pdf
[ODP]
follow
essays/dod-oss.odp
[PPT]
follow
essays/dod-oss.ppt
Presentation: Open Source Software (for U.S. Acquisitions) (2007-03)
follow
essays/oss_200703.pdf
ODF
follow
essays/oss_200703.odp
[OGG]
follow
multimedia/oss_200703.ogg
[MP3]
follow
multimedia/oss_200703.mp3
[FLAC]
follow
multimedia/oss_200703.flac
OSS and the DoD (2008 webinar)
follow
oss-dod-webinar2008.html
Questions and Answers, OSS and DoD
follow
essays/dod-oss-qa.html
Open Source Software (OSS) in U.S. Government Acquisitions
follow
essays/oss-government-acquisitions.html
“Publicly Releasing Open Source Software Developed for the U.S. Government”, Journal of Software Technology, Feb 2011, Vol. 14, Number 1
follow
https://www.csiac.org/journal_article/publicly-releasing-open-source-software-developed-us-government
Software Innovations
follow
The Most Important SoftwareInnovations
follow
innovation/innovation.html
Microsoft, the Innovator?
follow
innovation/microsoft.html
Innovation and OSS/FS
follow
oss_fs_why.html#innovation
Is OpenDocument an Open Standard? Yes!
follow
essays/opendocument-open.html
Presentation: Open Standards and Security
follow
essays/open-standards-security.pdf
Editable Slides
follow
essays/open-standards-security.odp
[OGG]
follow
multimedia/open-standards-security.ogg
[MP3]
follow
multimedia/open-standards-security.mp3
[FLAC]
follow
multimedia/open-standards-security.flac
Open Standards, Open Source
follow
essays/open-standards-open-source.html
Countering Spam Using Email Passwords
follow
essays/spam-email-password.html
Comments on Email Authentication for Countering Spam
follow
essays/email-authentication-ftc.html
Guarded Email Protocol
follow
guarded-email
A Garden of Chess Openings
follow
chess-openings/
Fischer Random Chess (Chess960)
follow
essays/Fischer_Random_Chess.html
FEN2Wikipedia
follow
misc/fen2wikipedia.html
PGN
follow
misc/game_of_the_century.pgn
Text
follow
misc/game_of_the_century.txt
PGN
follow
misc/immortal.pgn
Text
follow
misc/immortal.txt
PGN
follow
misc/evergreen.pgn
Text
follow
misc/evergreen.txt
PGN
follow
misc/deepblue-kasparov.pgn
Text
follow
misc/deepblue-kasparov.txt
Lovelace
follow
lovelace/
Steelman papers
follow
steelman/
Mathematical Recreations
follow
The Definitive Four Fours Answer Key
follow
fourfours/
Way Off Base
follow
essays/bases.html
When Adding and Multiplying are the Same
follow
essays/add-multiply.html
Formal Methods
follow
formal_methods/
How to prove stuff automatically
follow
formal_methods/how-to-prove-stuff.html
Simplify released as open source software
follow
misc/simplify-hp-release.txt
Text Adventures / MUDs / Interactive Fiction (IF)
follow
Adventure/Colossal Cave
follow
adventure/
Anchorhead (Lovecraftian horror)
follow
anchorhead/
Bronze (by Emily Short) transcript
follow
bronze/bronze-transcript.html
Scepter of Goth (history)
follow
scepter-of-goth/scepter-of-goth.html
Miscellaneous Essays
follow
The Origin of All Men are Mortal
follow
essays/all-men-are-mortal.html
Project Hail Mary and StarForce: Alpha Centauri
follow
essays/project-hail-mary-starforce.html
The Allsome Quantifier
follow
essays/allsome.html
Say Good Morning if it is Morning Where You Are
follow
essays/good-morning.html
Intellectual Rights, not Intellectual Property
follow
essays/intellectual-rights-not-intellectual-property.html
Ask Not Who Holds the Copyright
follow
essays/ask-not-holds-copyright.html
Playstation 4 (PS4) Stuck on Game Main Menu (cannot play any game) - How to Fix
follow
essays/playstation-4-stuck-main-menu.html
Politician"s Syllogism
follow
essays/politicians-syllogism.html
Checklists are for Experts
follow
essays/checklists.html
Apache Hadoop and Spark (presentation)
follow
essays/hadoop-spark.ppt
Improving make
follow
essays/make.html
Man as the World-Builder
follow
essays/world-builders.html
Why are Humans used as Batteries in the Matrix?
follow
essays/humans-batteries-matrix.html
How to Throw a Matrix Party
follow
essays/matrix-party.html
Crystal City Name Changes
follow
essays/crystal-city.html
Move Spaceship Earth!
follow
essays/move-spaceship-earth.html
Reviews of Books, Movies, and Other Stuff
follow
reviews.html
Liberty Bill 2
follow
essays/liberty-bill2.html
Treat Washington, DC as Part of Maryland for Congressional Elections
follow
essays/dc-in-maryland.html
Adult Patrol Chant
follow
essays/adult-patrol-chant.html
Writing Scores for Sight Reading
follow
essays/sight-reading.html
Gnossiene No 1 by Erik Satie (PDF score for easy sight-reading)
follow
misc/Gnossiene_No_1_Eric_Satie.pdf
.mscz
follow
misc/Gnossiene_No_1_Eric_Satie.mscz
Miscellaneous links
follow
misc.html
Source Lines of Code (SLOC)
follow
Counting SLOC papers
follow
sloc/
SLOCCount
follow
sloccount/
Linux Kernel 2.6: It’s Worth More!
follow
essays/linux-kernel-cost.html
Geek Video Franchises
follow
franchises/
George Mason University (GMU)Thesis/Dissertation Sample Document in OpenDocument format
follow
misc/gmu-sample-format.odt
PDF
follow
misc/gmu-sample-format.pdf
Miscellaneous Software
follow
Auto-DESTDIR (automates installation)
follow
auto-destdir/index.html
User-union (Union filesystem for unprivileged users)
follow
user-union/index.html
Readable s-expressions and sweet-expressions for Lisp-like languages
follow
readable/index.html
html2wikipedia
follow
html2wikipedia/
Apple ][ stuff
follow
apple2/
6502 development approaches
follow
6502/
Computer-related essays
follow
Don’t Use ISO/IEC 14977 Extended Backus-Naur Form (EBNF)
follow
essays/dont-use-iso-14977-ebnf.html
Eliminate Software Patents
follow
essays/software-patents.html
The DeWitt clause’s censorship should be illegal
follow
essays/dewitt-clause.html
The Waterfall Model
follow
essays/waterfall.html
Fixing Unix/Linux/POSIX Filenames (discusses newlines/tabs in file names, etc.)
follow
essays/fixing-unix-linux-filenames.html
How to easily open files and URLs from the command line
follow
essays/open-files-urls.html
Make it Simple: A Tale about Robert Dewar
follow
essays/make-it-simple-dewar.html
Introduction to the Autotools (autoconf, automake, and libtool)
follow
autotools/index.html
Automating DESTDIR for packaging
follow
essays/automating-destdir.html
Python 3 in Python 2
follow
essays/python3-in-python2.html
Easy and Cross-Platform GUI development FLOSS tools with Unix/Linux support
follow
essays/easy-cross-platform-gui.html
SCM Security
follow
essays/scm-security.html
My review ofDebugging by David J. Agans
follow
essays/debugging-agans.html
Simple and Readable Text Markup Languages vs. Rich Web Text Editing
follow
essays/simple-markup.html
Quotes in HTML
follow
essays/quotes-in-html.html
Notes on Fedora Linux
follow
essays/fedora-linux.html
Virtualbox and Fedora Linux
follow
essays/virtualbox-fedora-linux.html
Configuring Apache for Client Certificates (such as DoD CAC cards) on Red Hat Linux/CentOS
follow
essays/apache-cac-configuration.html
High School Advanced Math/Precalculus info
follow
advmath/
My web attic
follow
attic.html
https://dwheeler.com
follow
https://dwheeler.com
guinea pig
follow
wiggles.html
about site
follow
aboutsite.html
dwheeler.com (TM) and www.dwheeler.com (TM)are trademarks of David A. Wheeler.
follow
aboutsite.html#trademark
more information about Christianity is available
follow
xian.html
follow
http://www.spreadfirefox.com/?q=affiliates&id=31988&t=60