"Product teams don't get better by reading secure coding standards. They get better by working with security testers, seeing how their code gets broken by attackers, and learning from the experience. Before we expect software companies to ship better products, we need to see a top-down commitment to security, just like we saw at Microsoft. Everyone from the board room down to the QA team needs to agree that security trumps feature sets and release schedules."
- Thomas Ptacek, principal with Matasano Security.
Who would have predicted that Microsoft would become the poster-child for secure application development practices?
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment