secappdev.org's video: Architecture Analysis - Jim DelGrosso

Architecture Analysis, by Jim DelGrosso Software defects include both bugs (implementation) and flaws (design). This session will give a few concrete examples of bugs and flaws in various categories to show why the analysis techniques used to identify flaws must be different from the analysis techniques used to find bugs. We will then describe some analysis techniques to help identify flaws in a system. Finally we will outline some challenges you may face as you start to use these analysis techniques to look for flaws. Learning objectives + Understand the distinction between a bug and a flaw + Describe analysis techniques geared toward identifying flaws + Outline some challenges when looking for flaws Jim DelGrosso is a Principal Consultant at Cigital with over 30 years of experience working for software development and consulting organizations. At Cigital, Jim heads up the Architecture Analysis practice with the mission to analyze the architecture and design of systems to identify flaws and provide our customers contextual guidance to remediate or mitigate those flaws.