CTO, CigitalDr. Gary McGraw, Cigital’s Chief Technology Officer, is sometimes referred to as the father of software security (a.k.a. application security). His books and other writings, including Software Security (2006), Exploiting Software (2004), Building Secure Software (2001), and Java Security (1996) helped define and refine the field. McGraw invented the BSIMM with Sammy Migues and Brian Chess while growing Cigital into a large successful company. The BSIMM is now a de facto measuring stick for software security and has been used by hundreds of companies to measure software security initiatives. Learn more at http://www.cigital.com/~gem.