John Viega

John Viega is a software-security author, engineer, and entrepreneur. His work includes secure-development guidance, static analysis, cryptography, and application-security tools.

Secure development as an engineering practice

Viega co-authored Building Secure Software with Gary McGraw. The book gave developers practical guidance on security risk, code auditing, buffer overflows, design decisions, and the process of building software that can withstand malicious use.

Tools, standards, and community

His work has included the ITS4 static vulnerability scanner, Secure Software, security books, and technical standards activity. These strands show how application security grows through research, tools, documentation, and practitioners sharing what works.

Timeline

• 2000ACSAC biography describes Viega as a Reliable Software Technologies researcher and software-security group co-founder.
• 2001Co-authors <em>Building Secure Software</em> with Gary McGraw.
• 2000sFounds Secure Software and works on application-security tools and programs.
• PresentContinues work in software security and security technology.