How To Stop Making Excuses For Poor Application Security Testing
An posting from Dark reading about How To Stop Making Excuses For Poor Application Security Testing:
just as the old carpenter axiom warns to measure twice and cut once, the effort of putting in effective security testing practices earlier in the application development process saves many more headaches later in the application lifecycle.
“We want to have applications that don’t get surprise ‘no’s’ in pre-production approval, and that don’t get out there in production with more vulnerabilities,” says Diana Kelley, application security strategist for IBM, who says that in her opinion it takes a “fundamental shift” in practices and in mentality for enterprises to get there.
To read more click here: