{"id":8441,"date":"2018-06-12T07:00:13","date_gmt":"2018-06-12T15:00:13","guid":{"rendered":"http:\/\/formtek.com\/blog\/?p=8441"},"modified":"2018-04-18T16:25:40","modified_gmt":"2018-04-19T00:25:40","slug":"security-the-expensive-afterthought-of-not-designing-for-security-up-front","status":"publish","type":"post","link":"https:\/\/formtek.com\/blog\/security-the-expensive-afterthought-of-not-designing-for-security-up-front\/","title":{"rendered":"Security: The Expensive Afterthought of not Designing for Security Up-Front"},"content":{"rendered":"<p>Security continues to be an afterthought in the development of new technologies.<\/p>\n<p>Ten years ago, <a href=\"https:\/\/www.zdnet.com\/meet-the-team\/us\/larry-dignan\/\">Larry Dignan<\/a>, editor in chief at ZDNet, <a href=\"https:\/\/www.zdnet.com\/article\/why-is-security-usually-an-afterthought\/\">had this observation<\/a>\u00a0about what the top priorities are for developer and customers:<\/p>\n<table>\n<tbody>\n<tr>\n<td><strong>Software Developer Priorities<\/strong><\/p>\n<p>Cook up applications quickly;<br \/>\nGain massive distribution;<br \/>\nGet people to install it;<br \/>\nMonetize it.<\/td>\n<td><\/td>\n<td><strong>Customer Priorities<\/strong><\/p>\n<p>Save money;<br \/>\nEase of use;<br \/>\nEase of installation;<br \/>\nEnable the business somehow (and save more money).<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>Security doesn&#8217;t show up on the list.\u00a0 Unfortunately, things haven&#8217;t changed much in ten years.<\/p>\n<p>Over the last year there have been numerous stories about the problem of IoT devices, even medical devices, which have little or no security and can be easily hacked.\u00a0 There were, for example, articles in\u00a0<a href=\"https:\/\/www.wired.com\/brandlab\/2017\/06\/iot-is-coming-even-if-the-security-isnt-ready-heres-what-to-do\/\">Wired<\/a>, <a href=\"https:\/\/www.zdnet.com\/article\/iot-devices-are-an-enterprise-security-time-bomb\/\">ZDNet<\/a>, <a href=\"https:\/\/www.computerweekly.com\/opinion\/IoT-security-cannot-be-an-afterthought-it-must-be-the-foundation-of-design\">ComputerWeekly<\/a>, and <a href=\"https:\/\/www.iot-inc.com\/the-s-in-iot-stands-for-security-article\/\">this article<\/a> with the clever title &#8220;The S in IoT is for Security&#8221;.\u00a0 The bottom line is that the world of IoT devices is suffering a security crisis.<\/p>\n<p>But it isn&#8217;t just IoT. A <a href=\"https:\/\/sdtimes.com\/security\/survey-finds-frequent-critical-vulnerabilities-in-serverless-open-source-applications\/\">report by PureSec<\/a> recently reviewed the state of security in Serverless Open Source Applications.<\/p>\n<p><a href=\"https:\/\/www.linkedin.com\/in\/orysegal\/\">Ory Segal<\/a>, co-founder of PureSec, <a href=\"https:\/\/sdtimes.com\/security\/survey-finds-frequent-critical-vulnerabilities-in-serverless-open-source-applications\/\">said that<\/a> &#8220;personally, I was surprised by the fact that application security still seems like an afterthought when it comes to serverless architectures. It\u2019s as if everything we\u2019ve learned about application security in the past 20 years didn\u2019t quite stick, or perhaps folks didn\u2019t think it was relevant in the case of serverless.&#8221;<\/p>\n<div class=\"lightsocial_container\"><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/digg.com\/submit?url=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-the-expensive-afterthought-of-not-designing-for-security-up-front%2F&amp;title=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/digg.png\" alt=\"Digg This\" title=\"Digg This\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.reddit.com\/submit?url=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-the-expensive-afterthought-of-not-designing-for-security-up-front%2F&amp;title=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/reddit.png\" alt=\"Reddit This\" title=\"Reddit This\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.stumbleupon.com\/submit?url=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-the-expensive-afterthought-of-not-designing-for-security-up-front%2F&amp;title=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/stumbleupon.png\" alt=\"Stumble Now!\" title=\"Stumble Now!\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/buzz.yahoo.com\/buzz?targetUrl=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-the-expensive-afterthought-of-not-designing-for-security-up-front%2F&amp;headline=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/yahoo_buzz.png\" alt=\"Buzz This\" title=\"Buzz This\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.dzone.com\/links\/add.html?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-the-expensive-afterthought-of-not-designing-for-security-up-front%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/dzone.png\" alt=\"Vote on DZone\" title=\"Vote on DZone\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.facebook.com\/sharer.php?t=&amp;u=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-the-expensive-afterthought-of-not-designing-for-security-up-front%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/facebook.png\" alt=\"Share on Facebook\" title=\"Share on Facebook\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/delicious.com\/save?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-the-expensive-afterthought-of-not-designing-for-security-up-front%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/delicious.png\" alt=\"Bookmark this on Delicious\" title=\"Bookmark this on Delicious\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.dotnetkicks.com\/kick\/?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-the-expensive-afterthought-of-not-designing-for-security-up-front%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/dotnetkicks.png\" alt=\"Kick It on DotNetKicks.com\" title=\"Kick It on DotNetKicks.com\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/dotnetshoutout.com\/Submit?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-the-expensive-afterthought-of-not-designing-for-security-up-front%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/dotnetshoutout.png\" alt=\"Shout it\" title=\"Shout it\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.linkedin.com\/shareArticle?mini=true&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-the-expensive-afterthought-of-not-designing-for-security-up-front%2F&amp;title=&amp;summary=&amp;source=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/linkedin.png\" alt=\"Share on LinkedIn\" title=\"Share on LinkedIn\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.technorati.com\/faves?add=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-the-expensive-afterthought-of-not-designing-for-security-up-front%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/technorati.png\" alt=\"Bookmark this on Technorati\" title=\"Bookmark this on Technorati\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/twitter.com\/home?status=Reading+https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-the-expensive-afterthought-of-not-designing-for-security-up-front%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/twitter.png\" alt=\"Post on Twitter\" title=\"Post on Twitter\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.google.com\/buzz\/post?url=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-the-expensive-afterthought-of-not-designing-for-security-up-front%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/google_buzz.png\" alt=\"Google Buzz (aka. Google Reader)\" title=\"Google Buzz (aka. Google Reader)\" \/><\/a><\/div><\/div>","protected":false},"excerpt":{"rendered":"<p>Security continues to be an afterthought in the development of new technologies. Ten years ago, Larry Dignan, editor in chief at ZDNet, had this observation\u00a0about what the top priorities are for developer and customers: Software Developer Priorities Cook up applications<span class=\"ellipsis\">&hellip;<\/span><\/p>\n<div class=\"read-more\"><a href=\"https:\/\/formtek.com\/blog\/security-the-expensive-afterthought-of-not-designing-for-security-up-front\/\">Read more &#8250;<\/a><\/div>\n<p><!-- end of .read-more --><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[31],"tags":[],"class_list":["post-8441","post","type-post","status-publish","format-standard","hentry","category-security"],"_links":{"self":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/8441","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/comments?post=8441"}],"version-history":[{"count":3,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/8441\/revisions"}],"predecessor-version":[{"id":8444,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/8441\/revisions\/8444"}],"wp:attachment":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/media?parent=8441"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/categories?post=8441"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/tags?post=8441"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}