Security – Not just for Networks !
Criminals are targeting software.
Hackers know that you have firewalls – Not convenient to hack the network.
Hackers are targeting a new way to ‘hack’ into your systems; the new way is through applications.
Why Applications?
People are using software in every part of their lives !
The Business Impact
The ramifications of insecure software go beyond mere technology issues; there is also a definite business impact.
Not having secure software can lead to:
- Financial loss
- Bad publicity
- Investigations and litigation
- Liability (personal and corporate)
- Reputation damage
- Loss of brand, confidence and trust among customers, partners, shareholders and stakeholders
What is the answer ?
Success of a software assurance program within an organization is directly proportional to the support of executive management.
Security has to be ensured throughout the entire lifecycle.
All stakeholders in the software development process must be aware of common security tenets and threats.
Building secure software is a result of all the stakeholders having the appropriate levels of participation, and a security mindset in the design, development, and deployment of the software.
Stakeholders must be educated in how to build security within every phase of the lifecycle.
source: CSSLP white paper
