Desmond File

Blog archive

Back to School

Six months ago or so, I interviewed Microsoft security expert Mike Howard about the challenge his company faced as it worked to make the development of fundamentally secure software a core mission of every project. Known as Security Development Lifecycle (SDL), the effort took years to complete, and ultimately resulted in the release of much more secure code.

One complaint Howard voiced in that interview was the lack of security-related awareness and training among entry-level programmers arriving at Microsoft. He specifically pointed a finger at undergraduate institutions, which he said were producing programmers who didn't have to consider code vulnerabilities during their formal education. As a result, Microsoft now sends new arrivals to a weeks-long security training program, just to get them up to speed. In a sense, Microsoft is doing the work that schools should've accomplished.

We've heard other complaints, as well, about college-level programs.

Our senior editor, Kathleen Richards, is working on an upcoming feature about computer science education in colleges and graduate schools, and how it's changing (or not changing) to meet modern challenges. We want to hear from you. If you're hiring newly graduated programmers, what are you noticing?

And as a development manager, if you could send a message to the people who run the computer science curricula at major schools, what would you want to say to them? Now is your chance. E-mail me at [email protected].

Posted by Michael Desmond on 10/03/2007

comments powered by Disqus


  • AI for GitHub Collaboration? Maybe Not So Much

    No doubt GitHub Copilot has been a boon for developers, but AI might not be the best tool for collaboration, according to developers weighing in on a recent social media post from the GitHub team.

  • Visual Studio 2022 Getting VS Code 'Command Palette' Equivalent

    As any Visual Studio Code user knows, the editor's command palette is a powerful tool for getting things done quickly, without having to navigate through menus and dialogs. Now, we learn how an equivalent is coming for Microsoft's flagship Visual Studio IDE, invoked by the same familiar Ctrl+Shift+P keyboard shortcut.

  • .NET 9 Preview 3: 'I've Been Waiting 9 Years for This API!'

    Microsoft's third preview of .NET 9 sees a lot of minor tweaks and fixes with no earth-shaking new functionality, but little things can be important to individual developers.

  • Data Anomaly Detection Using a Neural Autoencoder with C#

    Dr. James McCaffrey of Microsoft Research tackles the process of examining a set of source data to find data items that are different in some way from the majority of the source items.

  • What's New for Python, Java in Visual Studio Code

    Microsoft announced March 2024 updates to its Python and Java extensions for Visual Studio Code, the open source-based, cross-platform code editor that has repeatedly been named the No. 1 tool in major development surveys.

Subscribe on YouTube