Re: [SC-L] Where Does Secure Coding Belong In the Curriculum?

2009-08-25 Thread Pete Werner
The just get the bloody thing to work is usually an attitude foisted on developers by the business side. I work in an internal application security function for a large enterprise and i'm yet to meet a developer who wasn't concerned about security. Developer education is very important and we

Re: [SC-L] Language agnostic secure coding guidelines/standards?

2008-11-21 Thread Pete Werner
Hi All Thank you for your replies, they have been very useful and will certainly help identifying things that need to appear in the standard. We're trying to make the standard something that is easily auditable, and have decided to further split items into two categories, those that should

[SC-L] Language agnostic secure coding guidelines/standards?

2008-11-13 Thread Pete Werner
Hi all I've been tasked with developing a secure coding standard for my employer. This will be a policy tool used to get developers to fix issues in their code after an audit, and also hopefully be of use to developers as they work to ensure they are compliant. The kicker is it needs to cover

Re: [SC-L] Insecure Software Costs US $180B per Year - Application and Perimeter Security News Analysis - Dark Reading

2007-12-04 Thread Pete Werner
On Dec 3, 2007 8:34 AM, silky [EMAIL PROTECTED] wrote: how does anyone know how to hire anyone for a job that they themselves aren't qualified for? well, you pay professionals to do it. recruitment agents. this should be part of their role. and absolutely agreed; most certification is

Re: [SC-L] re-writing college books - erm.. ahm...

2006-11-06 Thread pete werner
On 11/7/06, Wall, Kevin [EMAIL PROTECTED] wrote: Developers have to cut corners somewhere, and since security issues are not paramount, that's often what gets overlooked. this is the biggest issue i think. it gets overlooked because management dont value it. partly because its expensive to