Software Security Engineer
David maintains the CERT secure coding standard websites for Java, C, C++, and Perl.
David also runs the Source Code Analysis Lab (SCALe), a framework for proiding source code audits based on the CERT secure coding standards.
David has been the primary developer on a diverse set of software development projects at Carnegie Mellon University since 1991, ranging from hierarchical chip modeling and social organization simulation to automated machine translation (AMT). His KANTOO AMT software, developed in 1996, is still in production use at Caterpillar. He has over 13 years of Java development experience, starting with Java 2, and his Java projects include Tomcat servlets and Eclipse plug-ins. He has taught Secure Coding in C and C++ all over the world, to various groups in the military, government, and banking industries.
Publications (recent or significant)
CERT Oracle Secure Coding Standard for Java, The
Java Coding Guidelines: 75 Recommendations for Reliable and Secure Programs
- ISO/ IEC /JTC1/SC22/WG21 - The C++ Standards Committee
- ISO/IECJTC1/SC22/WG14 - C