Podcast
Questions and Answers
What does secure development refer to?
What does secure development refer to?
Secure development refers to the set of tools, practices, and approaches created to identify and prevent security flaws during early development of software systems.
What is the challenge with the volume of code produced by developers each year?
What is the challenge with the volume of code produced by developers each year?
The challenge is that at that volume, there’s a high opportunity for error, and it becomes harder and harder to catch those errors as the amount of code continues to increase.
Why is it most cost effective to identify and prevent security flaws during early development of software systems?
Why is it most cost effective to identify and prevent security flaws during early development of software systems?
It is most cost effective because it becomes harder and harder to catch errors as the amount of code continues to increase, and the cost to remove defects, including security flaws, can be hundreds of times higher after deployment.
Why do errors still manage to get into commercially available products despite the use of automated testing tools?
Why do errors still manage to get into commercially available products despite the use of automated testing tools?
Signup and view all the answers
What do research studies show about the cost to remove defects, including security flaws, after deployment?
What do research studies show about the cost to remove defects, including security flaws, after deployment?
Signup and view all the answers
What are some of the significant costs and risks associated with errors in commercially available products?
What are some of the significant costs and risks associated with errors in commercially available products?
Signup and view all the answers
What is the potential security risk associated with errors in software systems?
What is the potential security risk associated with errors in software systems?
Signup and view all the answers
Why is it challenging to catch errors as the amount of code continues to increase?
Why is it challenging to catch errors as the amount of code continues to increase?
Signup and view all the answers
What does the term 'secure development' refer to?
What does the term 'secure development' refer to?
Signup and view all the answers
What is the volume of code produced by developers each year, and why does it present an opportunity for error?
What is the volume of code produced by developers each year, and why does it present an opportunity for error?
Signup and view all the answers