The world certainly would be a boring place without security bloggers in the NoVA, DC, and MD area. Where else can you find security news that’s applicable to where you live or work?
But speaking of interesting, here’s our pick for tweet of the week:
grecs RT @dallendoug @rybolov has QOTD “It’s Hactivism 4 tech challenged. Just tell them to click link & leave their computer on.” #OWASPDC #totw
We also wanted to give this #totw honorable mention:
grecs RT @briankrebs lol, there’s prob no surer way to push a site that’s having trouble over the edge than asking if ppl can get to it. #totw
In addition to the three bloggers we’ve featured this week, you can find a list of other great bloggers in the NoVA, DC, and MD area here.
You can also follow us @grecs during the week for more great blog posts as they happen. Now, on to those posts!
#3 – Wade Is Back: Like we mentioned last week, Wade is back on the blogging scene with some great weekly commentary. Choosing six posts to comment on this week, Wade provides some insightful and in-depth commentary on subjects ranging from the National Retail Federation Poll to the trials and tribulations of public sector CISOs. Definitely be sure to check out the full post here.
#2 – Risky Business: It’s hard to remember what existed before risk management. It seems to be on the tip of everyone’s tongue, and when used correctly, it can be pretty effective. In their post “Risk Management,” @geminisecurity discusses risk management in detail, exposing both the pros and the cons. If you’re interested in finding out if risk management is really ‘worth the risk’ (pun intended), you can check out the full post.
#1 – OWASP and SAMM: It seems that @danphilpott is on a roll. Not only did he make our Top 3 last week, he takes the top slot this week for his guest post “OWASP and Uncle SAMM.” Writing for the Ariel Silverstone blog, @danphilpott addresses the goal of OWASP as well as a specific OWASP project— the Software Assurance Maturity Model (SAMM). Describing SAMM as “an open framework to help organizations formulate and implement a strategy for software security that is tailored to the specific risks facing the organization,” @danphilpott goes on to say that “SAMM seeks to improve security by enhancing application development business functions.” You can read more about those specific functions as well as the rest of @danphilpott’s excellent post here.
Well, that’s all for this week. Be sure to check back next week for more great posts by local security bloggers.
No related posts.


