820 reputation
49
bio website web.lookout.net
location Seattle, WA
age
visits member for 3 years, 11 months
seen Sep 19 '13 at 22:31

Chris leverages his security expertise to direct product strategies for Casaba, in addition to performing technical code reviews, penetration testing and project management. For more than a decade, Chris has been working at the forefront of the Internet security industry, carefully testing and reviewing the security of many widely used infrastructure protocols and products. Chris has authored several books including Windows XP Professional Security and served as technical editor for Hunting Security Bugs, which was written by the MS Office Security Team. Chris has been invited to speak at industry conferences including Microsoft BlueHat, BlackHat, CanSecWest, OWASP, SOURCE and the Internationalization and Unicode Conference.


Sep
24
awarded  Autobiographer
Dec
1
awarded  Yearling
Jul
27
awarded  Notable Question
Dec
1
awarded  Yearling
Aug
8
awarded  Popular Question
Dec
12
awarded  Nice Question
Dec
1
awarded  Yearling
Apr
11
awarded  Nice Answer
Dec
20
answered SQL Injection Prevention
Dec
20
comment Session Hijacking - regenerate session ID
True, updated although some would argue GUIDs are good enough given expiration and other factors affecting the session.
Dec
20
revised Session Hijacking - regenerate session ID
per request in comments
Dec
20
answered Session Hijacking - regenerate session ID
Dec
20
answered Whitelisting DOM elements to defeat XSS
Dec
11
comment Any comprehensive solutions for binary code protection and anti-reverse-engineering?
Guys, I'm totally in the same camp as you about the usefulness of these protections. We all know these are merely hurdles and a determined RE effort will overcome them with time and resources. That's not the point of discussion here though. The point of this question was to identify viable commercial solutions that implement a significant and challenging set of hurdles. From all of the answers so far, Arxan still stands out as the leader of the pack so unless someone knows of another relevant competitor that's where we'll go.
Dec
11
awarded  Editor
Dec
11
revised Any comprehensive solutions for binary code protection and anti-reverse-engineering?
added 103 characters in body
Dec
10
awarded  Critic
Dec
10
comment Any comprehensive solutions for binary code protection and anti-reverse-engineering?
Please don't answer if you don't have information to help the question. We all understand the limitations and arms race of trying to protect code from reverse engineering. We're trying to determine if we've identified the two leading products or if we missed some.
Dec
10
comment Any comprehensive solutions for binary code protection and anti-reverse-engineering?
Graham, this wasn't meant to be a philosophical question, it's practical. We have a requirement for this technology, understand the limitations and costs, and need to pick the right one.
Dec
9
answered What are some good website security scanning solutions?