[SC-L] OWASP Publicity

2007-11-15 Thread McGovern, James F (HTSC, IT)
I have observed an interesting behavior in that the vast majority of IT executives still haven't heard about the principles behind secure coding. My take says that we are publishing information in all the wrong places. IT executives don't really read ACM, IEEE or other the sporadic posting from

Re: [SC-L] OWASP Publicity

2007-11-15 Thread Gunnar Peterson
Local boy makes good http://online.wsj.com/article/0,,SB112128453130584810,00-search.html -gp On 11/15/07 10:25 AM, McGovern, James F (HTSC, IT) [EMAIL PROTECTED] wrote: I have observed an interesting behavior in that the vast majority of IT executives still haven't heard about the

Re: [SC-L] OWASP Publicity

2007-11-15 Thread Crispin Cowan
McGovern, James F (HTSC, IT) wrote: I have observed an interesting behavior in that the vast majority of IT executives still haven't heard about the principles behind secure coding. My take says that we are publishing information in all the wrong places. IT executives don't really read ACM,

Re: [SC-L] OWASP Publicity

2007-11-15 Thread Bernie Rosen
But, if you get the ideas in front of the C-Suite folks and it resonates, then they push it down the lines in their organization where, one hopes, those who should pay attention will pay attention. Awareness, I would think, is what matters. My $0.02 for the week. Bernie

Re: [SC-L] OWASP Publicity

2007-11-15 Thread Gary McGraw
Thanks gunnar. That was a gratifying article that I am proud of. We've garnered good coverage as a field in CIO magazine too. I don't think it's as simple as having ink in the right locations, but I do agree with james that that helps. Software security is continuing to spread and grow, and