Current Issue: Moving Forward

What's New

The Latest from the Magazine

key on verification code

A Riddle Wrapped in an Enigma

In 2015, the NSA released a statement on the need for postquantum cryptography, which will be a great stimulus to the development, standardi...

Podcast

The Silver Bullet Security Podcast with Gary McGraw

Kelly Lum Discusses Bug Hunting and a Unique Analytical Outlook on Security

by Gary McGraw, Cigital

Kelly Lum, headshot

Kelly Lum, a.k.a. Aloria, is a Security Engineer at Tumblr and an Adjunct Professor of Graduate Computer Networking and Application Security at NYU. She has 13 years of experience in computer security, having previously worked in both the government and financial services spaces. Kelly is also a frequent speaker on the Black Hat SummerCon Countermeasure circuit where she often focuses on data loss prevention (DLP) and bug hunting.

Listen as Gary and Kelly discuss the differences between application security and software security, finding bugs versus fixing bugs, improving code review tools, and how mental illness affects her analytical security outlook.

Listen:

More Silver Bullet »