Re: Interesting article on the adoption of Software Security

["Jeff Williams" <jeff.williams () aspectsecurity com>]

Integrating security activities into the software development lifecycle is
going to be a major theme at OWASP AppSec 2004 (June 19/20 in NYC).  The
talks will cover a broad range of topics that web application and web
service developers must address, including metrics, training, standards, and
best practices. Almost every talk includes a process angle.

You can find out more and check out the agenda at http://www.owasp.org.
There are still a few seats left.  I hope you can join us.

--Jeff

Jeff Williams
Aspect Security, Inc.
http://www.aspectsecurity.com

----- Original Message ----- 
From: "Kenneth R. van Wyk" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, June 08, 2004 12:05 PM
Subject: [SC-L] Interesting article on the adoption of Software Security


> There's an interesting article out on Net-Security.org (see the full
article
> at http://www.net-security.org/article.php?id=697) that addresses why
> software development organizations adopt (or do not adopt) a Software
> Security development methodology.  Check it out -- it's a good read, IMHO.
>
> Among other things, it says, "...effective secure development will only
become
> more widespread when organisations receive better education. To achieve
this
> security consultancies need to adopt an active campaign and the media need
to
> provide coverage."
>
> Cheers,
>
> Ken van Wyk
> -- 
> KRvW Associates, LLC
> http://www.KRvW.com