Software Security Metrics, Technical Debt Quantification, and Program Maturity

Risk assessment in the modern software industry must evolve beyond static checklists to address the dynamic nature of Agile and DevSecOps environments. This plan adopts a scenario-based approach aligned with ISO 27001, b…

December 8, 2025 · 6 min · 1226 words · Joshua Wortz

Ransomware Simulator: Cryptographic Attack Modeling and Application-Level Defenses

Broadcom. (2016). Alpha Ransomware. Symantec Enterprise. https://www.broadcom.com/support/security-center/protection-bulletin/alpha-ransomware…

November 30, 2025 · 6 min · 1184 words · Joshua Wortz

Static Application Security Testing (SAST) and Secure Web Application Design

International Information System Security Certification Consortium (ISC2). (n.d.). Cybersecurity certifications and continuing education. https://www.isc2.org…

November 24, 2025 · 9 min · 1901 words · Joshua Wortz

Threat Modeling and Architectural Risk Analysis: STRIDE and DREAD Applications

Hardening a Windows Server environment requires a structured, multi-layered approach that addresses risks, threats, and vulnerabilities across organizational, architectural, network, identity, software, and auditing doma…

November 17, 2025 · 13 min · 2663 words · Joshua Wortz

Secure Software Development Life Cycle (SSDLC): Comparative Analysis of Microsoft SDL and Apple Ecosystems

Security cannot be treated as a post-deployment consideration in modern software development. Microsoft’s Security Development Lifecycle (SDL) embeds security requirements, threat modeling, verification, and monitoring i…

November 14, 2025 · 9 min · 1901 words · Joshua Wortz

Compromised Network Indicators and Secure Application Risk Mitigations

Cybersecurity & Infrastructure Security Agency. (2021). Best practices for securing your home network [CSIA Guide 21-01]. U.S. Department of Homeland Security. https://www.cisa.gov/sites/default/files/publications/CISA_H…

November 3, 2025 · 3 min · 622 words · Joshua Wortz

Secure Software Development Life Cycle (SDLC) Phase Analysis and Control Gates

GeeksforGeeks. (2025). Top 8 Software Development Models Used in Industry. https://www.geeksforgeeks.org/software-engineering/top-8-software-development-models-used-in-industry/…

October 27, 2025 · 4 min · 827 words · Joshua Wortz