| 2008 | ||
|---|---|---|
| 57 | Gary McGraw: Automated Code Review Tools for Security. IEEE Computer 41(12): 108-111 (2008) | |
| 56 | Gary McGraw: Silver BulletTalks with Eugene Spafford. IEEE Security & Privacy 6(1): 10-15 (2008) | |
| 55 | Gary McGraw: Silver Bullet Talks with Ed Amoroso. IEEE Security & Privacy 6(2): 6-9 (2008) | |
| 54 | Gary McGraw: Silver Bullet Talks with Jon Swartz. IEEE Security & Privacy 6(3): 9-11 (2008) | |
| 53 | Gary McGraw: Silver Bullet Talks with Adam Shostack. IEEE Security & Privacy 6(4): 6-10 (2008) | |
| 52 | Gary McGraw: Silver Bullet Talks with Bill Cheswick [Interview]. IEEE Security & Privacy 6(5): 7-11 (2008) | |
| 51 | Gary McGraw: Silver Bullet Talks with Matt Bishop. IEEE Security & Privacy 6(6): 6-10 (2008) | |
| 2007 | ||
| 50 | Gary McGraw: Exploiting Online Games. USENIX Annual Technical Conference 2007 | |
| 49 | Gary McGraw: Silver Bullet Speaks with John Stewart [Interview]. IEEE Security & Privacy 5(1): 9-11 (2007) | |
| 48 | Gary McGraw: Silver Bullet Speaks with Dorothy Denning. IEEE Security & Privacy 5(2): 11-14 (2007) | |
| 47 | Gary McGraw: Silver Bullet Talks with Becky Bace. IEEE Security & Privacy 5(3): 6-9 (2007) | |
| 46 | Gary McGraw, Ross Anderson: Silver Bullet Talks with Ross Anderson. IEEE Security & Privacy 5(4): 10-13 (2007) | |
| 45 | Gary McGraw, Greg Hoglund: Online Games and Security. IEEE Security & Privacy 5(5): 76-79 (2007) | |
| 44 | Gary McGraw: Silver Bullet Talks with Annie Antón. IEEE Security & Privacy 5(5): 8-11 (2007) | |
| 43 | Gary McGraw: Silver Bullet Talks with Mikko Hypponen [Interview]. IEEE Security & Privacy 5(6): 8-11 (2007) | |
| 2006 | ||
| 42 | Gary McGraw: Software Security: Building Security In. ISSRE 2006: 6 | |
| 41 | Jeremy Epstein, Scott R. Matsumoto, Gary McGraw: Software Security and SOA: Danger, Will Robinson! IEEE Security & Privacy 4(1): 80-83 (2006) | |
| 40 | Gary McGraw: Silver Bullet Speaks to Avi Rubin. IEEE Security & Privacy 4(3): 11-13 (2006) | |
| 39 | Gary McGraw: Silver Bullet Speaks with Dan Geer. IEEE Security & Privacy 4(4): 10-13 (2006) | |
| 38 | Gary McGraw: Interview: Silver Bullet Speaks to Marcus Ranum. IEEE Security & Privacy 4(5): 11-14 (2006) | |
| 37 | Gary McGraw: Silver Bullet Speaks with Ed Felten. IEEE Security & Privacy 4(6): 10-13 (2006) | |
| 2005 | ||
| 36 | Brad Arkin, Scott Stender, Gary McGraw: Software Penetration Testing. IEEE Security & Privacy 3(1): 84-87 (2005) | |
| 35 | Sean Barnum, Gary McGraw: Knowledge for Software Security. IEEE Security & Privacy 3(2): 74-78 (2005) | |
| 34 | Dan Taylor, Gary McGraw: Adopting a Software Security Improvement Program. IEEE Security & Privacy 3(3): 88-91 (2005) | |
| 33 | Nancy R. Mead, Gary McGraw: A Portal for Software Security. IEEE Security & Privacy 3(4): 75-79 (2005) | |
| 32 | Kenneth R. van Wyk, Gary McGraw: Bridging the Gap between Software Development and Information Security. IEEE Security & Privacy 3(5): 75-79 (2005) | |
| 31 | Katrina Tsipenyuk, Brian Chess, Gary McGraw: Seven Pernicious Kingdoms: A Taxonomy of Software Security Errors. IEEE Security & Privacy 3(6): 81-84 (2005) | |
| 2004 | ||
| 30 | Gary McGraw: Software Security Clue Distribution. CSEE&T 2004: 6-7 | |
| 29 | Srivaths Ravi, Paul C. Kocher, Ruby B. Lee, Gary McGraw, Anand Raghunathan: Security as a new dimension in embedded system design. DAC 2004: 753-760 | |
| 28 | Gary McGraw: Exploiting Software. USENIX Security Symposium 2004 | |
| 27 | Gary McGraw: Software Security. IEEE Security & Privacy 2(2): 80-83 (2004) | |
| 26 | Noopur Davis, Watts S. Humphrey, Samuel T. Redwine Jr., Gerlinde Zibulski, Gary McGraw: Processes for Producing Secure Software: Summary of US National Cybersecurity Summit Subgroup Report. IEEE Security & Privacy 2(3): 18-25 (2004) | |
| 25 | Paco Hope, Gary McGraw, Annie I. Antón: Misuse and Abuse Cases: Getting Past the Positive. IEEE Security & Privacy 2(3): 90-92 (2004) | |
| 24 | Ivan Arce, Gary McGraw: Guest Editors' Introduction: Why Attacking Systems Is a Good Idea. IEEE Security & Privacy 2(4): 17-19 (2004) | |
| 23 | Denis Verdon, Gary McGraw: Risk Analysis in Software Design. IEEE Security & Privacy 2(4): 79-84 (2004) | |
| 22 | Gary McGraw, Bruce Potter: Software Security Testing. IEEE Security & Privacy 2(5): 81-85 (2004) | |
| 21 | Brian Chess, Gary McGraw: Static Analysis for Security. IEEE Security & Privacy 2(6): 76-79 (2004) | |
| 2003 | ||
| 20 | Gary McGraw: From the Ground Up: The DIMACS Software Security Workshop. IEEE Security & Privacy 1(2): 59-66 (2003) | |
| 2002 | ||
| 19 | John Viega, J. T. Bloch, Tadayoshi Kohno, Gary McGraw: Token-based scanning of source code for security problems. ACM Trans. Inf. Syst. Secur. 5(3): 238-261 (2002) | |
| 18 | Gary McGraw: On Bricks and Walls: Why Building Secure Software is Hard. Computers & Security 21(3): 229-238 (2002) | |
| 17 | Gary McGraw: Managing Software Security Risks. IEEE Computer 35(4): 99-101 (2002) | |
| 16 | Greg Hoglund, Gary McGraw: Point/Counterpoint: Security Band-Aids: More Cost-Effective than "Secure" Coding / Building Secure Software: Better than Protecting Bad Software. IEEE Software 19(6): 56-59 (2002) | |
| 2001 | ||
| 15 | Christoph C. Michael, Gary McGraw, Michael Schatz: Generating Software Test Data by Evolution. IEEE Trans. Software Eng. 27(12): 1085-1110 (2001) | |
| 2000 | ||
| 14 | John Viega, J. T. Bloch, Y. Kohno, Gary McGraw: ITS4: A Static Vulnerability Scanner for C and C++ Code. ACSAC 2000: 257- | |
| 13 | Gary McGraw: Will Openish Source Really Improve Security. IEEE Symposium on Security and Privacy 2000: 128-129 | |
| 12 | Gary McGraw, J. Gregory Morrisett: Attacking Malicious Code: A Report to the Infosec Research Council. IEEE Software 17(5): (2000) | |
| 11 | Ross J. Anderson, Terry Bollinger, Doug Brown, Enrique Draier, Philip Machanick, Gary McGraw, Nancy R. Mead, Arthur B. Pyster, Howard Schmidt, Timothy J. Shimeall: Roundtable on Information Security Policy. IEEE Software 17(5): (2000) | |
| 10 | John Viega, Tom Mutdosch, Gary McGraw, Edward W. Felten: Statically Scanning Java Code: Finding Security Vulnerabilities. IEEE Software 17(5): (2000) | |
| 1999 | ||
| 9 | Gary McGraw: Software Assurence for Security. IEEE Computer 32(4): 103-105 (1999) | |
| 1998 | ||
| 8 | Christoph C. Michael, Gary McGraw: Automated Software Test Data Generation for Complex Programs. ASE 1998: 136-146 | |
| 7 | Anup K. Ghosh, Tom O'Connor, Gary McGraw: An Automated Approach for Identifying Potential Vulnerabilities in Software. IEEE Symposium on Security and Privacy 1998: 104-114 | |
| 6 | Gary McGraw: Weak links in e-commerce security: examples from the field. NDSS 1998 | |
| 5 | Gary McGraw, Edward W. Felten: Mobile Code and Security - Guest Editors' Introduction. IEEE Internet Computing 2(6): 26-29 (1998) | |
| 1997 | ||
| 4 | Christoph C. Michael, Gary McGraw, Michael Schatz, C. C. Walton: Genetic Algorithms for Dynamic Test Data Generation. ASE 1997: 307-308 | |
| 3 | Jeffrey M. Voas, Gary McGraw, Lora Kassab, Larry Voas: A 'Crystal Ball' for Software Liability. IEEE Computer 30(6): 29-36 (1997) | |
| 2 | Jeffrey M. Voas, Frank Charron, Gary McGraw, Keith W. Miller, Michael Friedman: Predicting How Badly ``Good'' Software Can Behave. IEEE Software 14(4): 73-83 (1997) | |
| 1993 | ||
| 1 | Gary McGraw, Douglas Hofstadter: Letter Spirit: An Architecture for Creativity in an Microdomain. AI*IA 1993: 65-70 | |