Gary McGraw
McGraw made software security a concrete engineering discipline: design, testing, architecture, and governance are part of the product, not an afterthought.
Gary McGraw is a computer scientist, author, and software-security practitioner. He co-founded Cigital and later co-founded the Berryville Institute of Machine Learning; his work combines writing, research, and practical software-security programs.
Building security in
His books, including Building Secure Software, Exploiting Software, and Software Security, explain why secure software requires attention throughout development rather than a final testing pass.
Security practice at scale
His work on the Building Security In Maturity Model treats organizational security practices as something that can be observed and compared, moving application-security discussions toward repeatable engineering evidence.
Timeline
- 1995Begins work at Reliable Software Technologies, later Cigital.
- 2001Co-authors <em>Building Secure Software</em>.
- 2004Co-authors <em>Exploiting Software</em>.
- 2006Publishes <em>Software Security: Building Security In</em>.
Gary McGraw
- Type
- Person
- Era
- 1990s-Present
- Known for
- Software Security: Building Security In; Building Secure Software; BSIMM
- Tags
- software-security, application-security, secure-development, author, bsimm
Created by Joas A Santos · Something wrong or want it removed? Open an issue.