IT lexicon › Security › John Viega

John Viega

Security På svenska → Updated: 2026-10-15

American security engineer who co-wrote the first book on building secure software, co-designed GCM — and wrote GNU Mailman on the side.

At Cigital in 2000, Viega built ITS4, one of the first static vulnerability scanners for C code, with Gary McGraw and Tadayoshi Kohno among others. The following year he and McGraw published Building Secure Software, which argued that security is a property of the code rather than something a firewall bolts on afterwards. With Michael Howard and David LeBlanc he later wrote 19 Deadly Sins of Software Security.

In 2004 he and David McGrew designed Galois/Counter Mode, which as AES-GCM now protects the bulk of TLS traffic. Rather more quietly, in the late 1990s he wrote the first version of Mailman, the list manager Barry Warsaw went on to maintain and which ran a large share of the open-source world's mailing lists for decades.

← Back to the lexicon