This post originated from an RSS feed registered with Web Buzz by Tim Vernum. Original Post: About... Feed Title: Secure by Design Feed URL: http://www.securearchitecture.net/feed/rss2 Feed Description: A blog about the intersection of security and architecture Latest Web Buzz Posts Latest Web Buzz Posts by Tim Vernum Latest Posts From Secure by Design

This is my new blog - dedicated to architecture and security.

About me I'm an architect (of the software variety, not buildings). At various points in time I've been a technical architect, solution architect, application architect and enterprise architect. If you're not sure what the difference is between each of those, then don't mind too much - a lot of the time I can't tell either

These days I do freelance consulting work in various security/architecture roles - training, solution design, design reviews, vulnerability assessments, etc.

You can contact me at tim @ securearchitecture.net, I typically have some availability for short term consultancy work.

About this blog This blog is where I'll be posting some of my thoughts on designing secure software systems.

That's not just "how to avoid SQL injection attacks" , although I'll probably talk about some of that sort of stuff, but it's also "how to implement a reliable access control system" and "first steps towards multi-factor authentication" (both of which I have advice on, and you should see posts on those topics soon)

I believe that the best security solutions - and the worst vulnerabilities - are a result of the underlying architecture of an application. Chasing down the latest threats variants, and applying spot-fixes to security holes is the wrong way to secure an application. The right solutions start with the right architectures.