Notes

1the printed version of this book will be created after the first v1.0 release, and will be released at lulu.com and Amazon.

2FindSecBugs (https://github.com/find-sec-bugs/find-sec-bugs) has better security rules than FindBugs and is under current active development/maintenance

3Murphy’s law: ‘Anything that can go wrong, will go wrong’, https://en.wikipedia.org/wiki/Murphy%27s_law

4See AppSec USA 2010 Keynote “Upon the Threshold of Opportunity” https://vimeo.com/15506033 , and “When talking about Application Security and Software Quality, Pollution is a much better analogy than Technical Debt” http://blog.diniscruz.com/2016/03/when-talking-about-application-security.html

5Princess Bride - Pit of Despair, https://www.youtube.com/watch?v=mBaDcOBoHFk

6a variation of the quote:

7FindSecBugs (https://github.com/find-sec-bugs/find-sec-bugs) has better security rules than FindBugs and is under current active development/maintenance