"Really good software engineering skills are in incredibly short supply.
We see that when we hire engineers out of school. They know nothing about building
secure software," Howard told me. "They don't know the issues -- it's
as simple as that. They don't understand the issues."
This is a lament I've heard before, and one that extends forward to deep concerns
about the general state of corporate software development. Internal development
shops are simply not doing enough to harden their code, particularly in an era
when attacks are increasingly moving to the application layer.
Howard points a finger at universities that fail to integrate security concepts
into their computer science curricula. He also singles out corporate development
shops for failing to address secure development concepts, both from a training
and operational standpoint. And that's not the worst of it, says Howard.
"You know, the most dangerous thing is the number of people who think
they know how to build secure software, when they don't. That's the scary thing,"
Is Michael Howard on to something? Tell us what your company is doing to secure
code against attacks and vulnerabilities, and how flawed development might have
helped create a crisis in the past. Write me at [email protected].
Posted by Michael Desmond on 04/25/2007 at 1:15 PM
In-editor chat and a Chat view are available in a waitlisted technical preview.
Since recently introducing the open source Semantic Kernel to help developers use AI large language models (LLMs) in their apps, Microsoft has been busy improving it, publishing new guidance on how to use it and touting its capabilities.
The Modern Data Warehouse (MDW) pattern makes it easier than ever to deal with the increasing volume of enterprise data by enabling massive, global-scale writes operations while making the information instantly available for reporting and insights.
Responding to user requests for a more seamless startup experience, Uno Platform 4.8 introduces a new App Template wizard to do just that.
The new ledger feature in SQL Server 2022 provides blockchain-based security to ensure data isn't tampered with.
> More Webcasts