Why Do Developers Make Dangerous Software Errors
Explore the reasons behind dangerous software errors in this 43-minute conference talk from LASCON 2012. Delve into the challenges of secure code development, including implicit security requirements and the limitations of existing standards. Examine technical and operational controls contributing to application security, and consider key questions about technology's current state. Learn about the multidisciplinary nature of software assurance and the importance of validating supplier cybersecurity practices. Discover implementation lessons from successful companies, critical success factors for effective measurement, and the complexities of measuring secure code. Gain insights into relevant standards and frameworks, such as ISO/IEC TR 24772 and NIST IR 7622. Understand the crucial role of accurate and reliable information in business functions and explore future directions in addressing software errors.