The most popular and comprehensive Open Source ECM platform
Let us know more
Secure Code Training: Building Security into Apps from the Ground Up
The increasing number of data breaches is causing businesses to rethink how they secure their networks and software.
Security has traditionally been handled by IT systems groups. These groups seldom had insight into how security is handled within the applications that they attempted to secure.
For example, Hillel Solow, co-founder and CTO of Protego Labs, said that “as security professionals, we’ve been trying to avoid applications and code for a long time. It was complicated. We didn’t understand it. We didn’t know what was going on inside it. We built an entire practice around, ‘How do we build security controls around things without having to worry about what’s happening inside them?’ We put things in the front and the back, on the bottom and the top.”
A report by StackRox found that 60 percent of developers say that security and security training are seldom or never considered during their development cycle.
The goal now is to make security a feature that is built into application during the development period. Secure code training is training which many developers are now being required to take in order to write more secure code. The training teaches developers how to make their software more secure and as much as possible avoid the introduction of vulnerabilities.
Dennis Hurst, Founder and President of Saltworks, wrote for SDTimes that “While the onus is on companies to hold code to the highest caliber, they can’t assume developers “just have” the necessary know-how to make it so. Programmers out of college are hardly taught the value and practice of secure coding, and how it remediates vulnerabilities.”
