https://www.snakeeyessoftware.com/tags/softwaresecurity/Recent content in SoftwareSecurity on Snake Eyes SoftwareHugo -- 0.164.0en-usWed, 10 Dec 2025 00:00:00 +0000https://www.snakeeyessoftware.com/blog/supply-chain-vulnerabilities-npm-dependency-security/Wed, 10 Dec 2025 00:00:00 +0000https://www.snakeeyessoftware.com/blog/supply-chain-vulnerabilities-npm-dependency-security/Explore NPM supply chain vulnerabilities including the React RCE exploit and Shai-Hulud worm. Learn dependency management best practices and AI-powered security solutions.https://www.snakeeyessoftware.com/blog/lean-software-teams-building-digital-landfills/Tue, 15 Jul 2025 00:00:00 +0000https://www.snakeeyessoftware.com/blog/lean-software-teams-building-digital-landfills/Software teams spend millions building features with minimal value while security vulnerabilities rise. The article critiques misapplication of Lean Manufacturing principles in software development.https://www.snakeeyessoftware.com/blog/the-impossible-security-goal-your-team-should-set-anyway/Tue, 07 Jan 2025 00:00:00 +0000https://www.snakeeyessoftware.com/blog/the-impossible-security-goal-your-team-should-set-anyway/A guide proposing that teams adopt an ambitious security goal of remediating all vulnerabilities within 60 days, emphasizing systems and habits over traditional goal-setting approaches.https://www.snakeeyessoftware.com/blog/kpi-chaos-to-cash-flow-rethinking-security-metrics-for-real-success/Fri, 09 Aug 2024 00:00:00 +0000https://www.snakeeyessoftware.com/blog/kpi-chaos-to-cash-flow-rethinking-security-metrics-for-real-success/An examination of how application security key performance indicators can either sabotage or support successful software development programs.https://www.snakeeyessoftware.com/blog/subscribed-to-risk-unpacking-the-security-implications-of-subscription-based-software/Mon, 06 May 2024 00:00:00 +0000https://www.snakeeyessoftware.com/blog/subscribed-to-risk-unpacking-the-security-implications-of-subscription-based-software/An examination of how subscription-based software models have transformed development and deployment, while introducing new security and privacy challenges for both consumers and product teams.https://www.snakeeyessoftware.com/blog/bulletproof-your-ui-crafting-secure-and-user-friendly-interfaces/Wed, 27 Mar 2024 00:00:00 +0000https://www.snakeeyessoftware.com/blog/bulletproof-your-ui-crafting-secure-and-user-friendly-interfaces/Software security begins with user interaction. This article explores how UI design, data validation, and error handling work together to create secure applications while maintaining usability.https://www.snakeeyessoftware.com/blog/security-as-an-enabler-the-case-for-a-hands-on-approach/Thu, 21 Mar 2024 00:00:00 +0000https://www.snakeeyessoftware.com/blog/security-as-an-enabler-the-case-for-a-hands-on-approach/Examines whether security functions as a gatekeeper or enabler across different authentication approaches: building custom solutions, purchasing commercial platforms like Okta, or blending open-source tools like Keycloak.https://www.snakeeyessoftware.com/blog/tools-gates-and-debates-navigating-the-quirks-of-software-security/Wed, 13 Mar 2024 00:00:00 +0000https://www.snakeeyessoftware.com/blog/tools-gates-and-debates-navigating-the-quirks-of-software-security/A security expert with 20+ years of experience critiques mainstream software security advice, discussing how security functions as guidance rather than a gatekeeper, the limitations of attribute-based vulnerability prioritization, and why tool diversity strengthens security practices.https://www.snakeeyessoftware.com/blog/secure-by-design-exploring-technology-choices/Wed, 28 Feb 2024 00:00:00 +0000https://www.snakeeyessoftware.com/blog/secure-by-design-exploring-technology-choices/Examination of consistent versus varied technology stacks in microservices, with focus on security implications for the MyOwnTutorial application.https://www.snakeeyessoftware.com/blog/building-blocks-architectural-principles-driving-higher-value-software/Wed, 21 Feb 2024 00:00:00 +0000https://www.snakeeyessoftware.com/blog/building-blocks-architectural-principles-driving-higher-value-software/Examination of design principles including Domain-Driven Design, Hexagonal Architecture, Event-Driven Programming, CQRS, Micro-service Architecture, API-First Development, and Privacy-First approaches for building secure, cost-effective software.https://www.snakeeyessoftware.com/blog/designing-for-the-future-of-education-a-tutorial-on-building-secure-applications/Wed, 07 Feb 2024 00:00:00 +0000https://www.snakeeyessoftware.com/blog/designing-for-the-future-of-education-a-tutorial-on-building-secure-applications/A tutorial exploring secure application design for educational software, balancing legal requirements with business and practical security needs.https://www.snakeeyessoftware.com/blog/the-secure-software-habit/Wed, 31 Jan 2024 00:00:00 +0000https://www.snakeeyessoftware.com/blog/the-secure-software-habit/Guide to building secure software through intentional practices across building, testing, and deployment phases.https://www.snakeeyessoftware.com/blog/hiding-data-in-plain-sight/Wed, 10 Jan 2024 00:00:00 +0000https://www.snakeeyessoftware.com/blog/hiding-data-in-plain-sight/Overview of four data protection methods: encryption, hashing, encoding, and compression, with applications in educational software security.https://www.snakeeyessoftware.com/blog/none-shall-pass/Tue, 02 Jan 2024 00:00:00 +0000https://www.snakeeyessoftware.com/blog/none-shall-pass/Explores access control strategies for protecting data privacy in software systems, using Monty Python references to illustrate security concepts.https://www.snakeeyessoftware.com/blog/the-honor-code-of-data-privacy-first-design/Wed, 27 Dec 2023 00:00:00 +0000https://www.snakeeyessoftware.com/blog/the-honor-code-of-data-privacy-first-design/An examination of privacy-first design principles in software, covering data protection, confidentiality, access controls, and secure system architecture.https://www.snakeeyessoftware.com/blog/it-all-starts-with-design/Wed, 20 Dec 2023 00:00:00 +0000https://www.snakeeyessoftware.com/blog/it-all-starts-with-design/An exploration of software design principles, drawing parallels with woodworking and emphasizing the importance of design throughout the development lifecycle.https://www.snakeeyessoftware.com/blog/software-security-is-software-quality/Wed, 13 Dec 2023 00:00:00 +0000https://www.snakeeyessoftware.com/blog/software-security-is-software-quality/An exploration of how software security parallels craftsmanship quality, using woodworking analogies to explain why security testing is essential for consumer-facing software products.https://www.snakeeyessoftware.com/blog/security-posture-basics/Wed, 11 Oct 2023 00:00:00 +0000https://www.snakeeyessoftware.com/blog/security-posture-basics/An overview of security posture fundamentals, covering weaknesses, vulnerabilities, threats, and risk management strategies.https://www.snakeeyessoftware.com/blog/availability/Wed, 04 Oct 2023 00:00:00 +0000https://www.snakeeyessoftware.com/blog/availability/The third pillar of information security focuses on ensuring data accessibility according to established expectations through network, server, and application-level controls.https://www.snakeeyessoftware.com/blog/integrity-what-you-see-is-what-you-get/Wed, 27 Sep 2023 00:00:00 +0000https://www.snakeeyessoftware.com/blog/integrity-what-you-see-is-what-you-get/Explores data integrity as a fundamental software security principle, examining how to ensure data accuracy and completeness through confidentiality controls, error handling, and digital signatures.https://www.snakeeyessoftware.com/blog/confidentiality/Wed, 20 Sep 2023 00:00:00 +0000https://www.snakeeyessoftware.com/blog/confidentiality/An exploration of confidentiality as a key pillar of system trust, covering data management, user authentication, access control principles, and data protection methods.https://www.snakeeyessoftware.com/blog/what-is-software-security/Mon, 03 Apr 2023 00:00:00 +0000https://www.snakeeyessoftware.com/blog/what-is-software-security/An introduction to software security covering confidentiality, integrity, and availability of applications, plus post-deployment responsibilities.