Code: science and production
Phil Bull presents an interesting, generally convincing, argument in 'Why you can ignore reviews of scientific code by commercial software developers', with a couple of exceptions.
Shostack + Friends Blog
Posts in category "metrics"
Empirical Evaluation of Secure Development Processes
Earlier this year, I helped to organize a workshop at Schloss Dagstuhl on Empirical Evaluation of Secure Development Processes. I think the workshop was a tremendous success.
Leave Those Numbers for April 1st
Over-inflated numbers won't scare me into buying your 'solution'.
The DREAD Pirates
[no description provided]