Skip to content

DEV Community

Foundations Series' Articles

Back to Ofri Peretz's Series

Jul 18

The Base Rate Problem: Why 95% Precision Means Nothing Without Context

#security #devsecops #node #javascript

7 min read

Cover image for Bias in Measurement: The Silent Failure Mode in Benchmark Design

Jul 18

Bias in Measurement: The Silent Failure Mode in Benchmark Design

#security #devsecops #node #javascript

8 min read

Jul 18

Goodhart's Law in Benchmarking: When the Metric Becomes the Target

#security #devsecops #node #javascript

7 min read

Jul 18

Inter-Rater Agreement and Cohen's Kappa: When Your Labels Are Opinions

#security #devsecops #node #javascript

7 min read

Jul 19

The Confusion Matrix: What TP, FP, FN, and TN Actually Mean

#security #devsecops #node #javascript

8 min read

Jul 19

Composite Scores and Weighting: Your 'Overall Score' Is an Editorial

#security #devsecops #node #javascript

8 min read

Jul 19

CVSS Scores Explained: The Number Measures Severity, Not Risk

#security #devsecops #node #javascript

8 min read

Jul 19

The CWE Taxonomy, Explained: A Name Is Not a Verdict

#security #devsecops #node #javascript

8 min read

Jul 19

Ground Truth in Security Testing: Who Decides What's Vulnerable?

#security #devsecops #node #javascript

8 min read

Jul 19

OWASP Top 10, Explained: An Address System, Not a Severity Scale

#security #devsecops #node #javascript

8 min read

Jul 19

Ranking vs. Measuring: What a Leaderboard Throws Away

#security #devsecops #node #javascript

8 min read

Jul 19

Reproducibility vs Replicability: Why Benchmark Numbers Need Both

#security #devsecops #node #javascript

7 min read

Jul 19

Statistical Significance and p-Values: What p > 0.05 Actually Means

#security #devsecops #node #javascript

8 min read

Jul 19

Taint vs. Heuristic Detection: The Difference Between a Proof and a Hunch

#security #eslint #devsecops #javascript

7 min read

Cover image for Precision, Recall, and F1 for Static Analysis: Same Score, Opposite Tools

Jul 19

Precision, Recall, and F1 for Static Analysis: Same Score, Opposite Tools

#security #devsecops #node #javascript

8 min read

Jul 19

Proxy Metrics: The Number You Optimize Is Not the Thing You Want

#security #devsecops #node #javascript

8 min read

Jul 19

Sample Size and Statistical Power: What a Small Sample Can and Cannot Tell You

#security #devsecops #node #javascript

8 min read

Jul 19

Static Analysis vs. SAST vs. Linting: The Taxonomy That Matters for Security Teams

#security #devsecops #node #javascript

8 min read

Jul 19

Valid vs. Reliable Metrics: Consistent Numbers Can Still Be Wrong

#security #devsecops #node #javascript

7 min read