Research and writing on static analysis, LLMs for security, vulnerability detection, and secure software development.https://lambdasec.github.io/https://lambdasec.github.io/Towards-Mostly-Autonomous-Software-Development/https://lambdasec.github.io/Towards-Mostly-Autonomous-Software-Development/Almost exactly a year ago, I wrote about how coding assistants were changing software development. At the time, Claude Sonnet 3.5 was the SOTA coding model, and we were witnessing the early signs of aThu, 25 Dec 2025 00:00:00 GMThttps://lambdasec.github.io/AutoGrep-Automated-Generation-and-Filtering-of-Semgrep-Rules-from-Vulnerability-Patches/https://lambdasec.github.io/AutoGrep-Automated-Generation-and-Filtering-of-Semgrep-Rules-from-Vulnerability-Patches/Static Analysis Security Testing (SAST) tools are essential for modern secure software development, yet the maintenance and creation of high-quality detection rules remain challenging and resource-intMon, 24 Feb 2025 00:00:00 GMThttps://lambdasec.github.io/Sparks-of-Digital-Immortality-with-meraGPT/https://lambdasec.github.io/Sparks-of-Digital-Immortality-with-meraGPT/In an era where our digital footprints are as expansive as the internet itself, the concept of digital immortality is not just science fiction but a burgeoning reality. The introduction of meraGPT , tMon, 15 Apr 2024 00:00:00 GMThttps://lambdasec.github.io/AutoFix-Automated-Vulnerability-Remediation-using-Static-Analysis-and-LLMs/https://lambdasec.github.io/AutoFix-Automated-Vulnerability-Remediation-using-Static-Analysis-and-LLMs/In the rapidly evolving world of software development, security remains a paramount concern. With the increasing complexity of applications and the ever-present threat of cyber attacks, developers andTue, 12 Dec 2023 00:00:00 GMThttps://lambdasec.github.io/When-the-going-gets-tough-Understanding-the-challenges-with-Product-commoditization-in-SCA/https://lambdasec.github.io/When-the-going-gets-tough-Understanding-the-challenges-with-Product-commoditization-in-SCA/Recently, I have been thinking a lot about product commoditization and how it affects the software composition analysis (SCA) tools market. If you have been living under a rock and have never heard ofFri, 14 Jun 2019 00:00:00 GMThttps://lambdasec.github.io/The-Most-In-Demand-Programming-Languages-of-2018/https://lambdasec.github.io/The-Most-In-Demand-Programming-Languages-of-2018/We saw several new programming languages like Kotlin, Rust, and Go lang come into promienence this year. In this article, we take a look at what 2018 has in store when it comes to programming languageFri, 29 Dec 2017 00:00:00 GMThttps://lambdasec.github.io/Cyber-Wars-in-2018/https://lambdasec.github.io/Cyber-Wars-in-2018/This year we saw a number cyber attacks like WannaCry and Petya aimed at causing disruptions and damage to organizations and nations. In this article, we take a look at what is in store for us in 2018Thu, 21 Dec 2017 00:00:00 GMThttps://lambdasec.github.io/Is-the-World-Ready-for-the-New-Generation-of-Self-Propagating-Ransomware/https://lambdasec.github.io/Is-the-World-Ready-for-the-New-Generation-of-Self-Propagating-Ransomware/Self-propagating threats such as WannaCry and Petya were only the tips of the iceberg. The success hackers enjoyed with WannaCry and Petya makes it quite likely others will try to replicate the tacticWed, 13 Dec 2017 00:00:00 GMThttps://lambdasec.github.io/The-Impact-of-DevOps-On-Application-Performance-Management/https://lambdasec.github.io/The-Impact-of-DevOps-On-Application-Performance-Management/Application Performance Mangement or APM refers to the practice of monitoring the performance of your code, application, runtimes, and overall user experience. In this article, we will talk about how Thu, 07 Dec 2017 00:00:00 GMThttps://lambdasec.github.io/What-are-the-top-3-free-security-tools-that-every-infosec-professional-should-use/https://lambdasec.github.io/What-are-the-top-3-free-security-tools-that-every-infosec-professional-should-use/There are several free tools that a security engineer may use as part of their arsenal but the following three are quite essential.Wed, 22 Nov 2017 00:00:00 GMThttps://lambdasec.github.io/Companies-Lax-on-Open-Source-Risk/https://lambdasec.github.io/Companies-Lax-on-Open-Source-Risk/Recently, a survey done on open source risk found that enterprises are not proactive in managing and securing the use open source. Almost 40% of respondants said that no one in their company was respoSun, 12 Nov 2017 00:00:00 GMThttps://lambdasec.github.io/5-Steps-Towards-GDPR-Compliance/https://lambdasec.github.io/5-Steps-Towards-GDPR-Compliance/On 25th May 2018 the EU General Data Protection Regulation (GDPR) will become enforceable. It will change how businesses and public sector organizations can handle information of customers and users. Mon, 18 Sep 2017 00:00:00 GMThttps://lambdasec.github.io/Protecting-Spring-Boot-Apps-with-Botwall4J/https://lambdasec.github.io/Protecting-Spring-Boot-Apps-with-Botwall4J/Botwall4J is an open-source library that can help protect Java web applications from bots, content scrapers and automated account hijacking attempts. In this article, we will see how simple it is to iSat, 25 Mar 2017 00:00:00 GMThttps://lambdasec.github.io/Fuzzing-Java-Libraries-with-GramTest/https://lambdasec.github.io/Fuzzing-Java-Libraries-with-GramTest/GramTest is a Java-based tool that allows you to generate random test cases based on BNF grammars. It is an open-source project and can be downloaded from GitHub . In this article, we will see how youFri, 24 Mar 2017 00:00:00 GMThttps://lambdasec.github.io/Lambda-Security/https://lambdasec.github.io/Lambda-Security/I have always been interested in the interplay between programming languages and software security. In particular, isn't it nice that there are class of vulnerabilities that can be eliminated by desigSun, 08 Jan 2017 00:00:00 GMT