This week we talked about the Software Development Lifecycle. We approached it from the standpoint of where security needs to be added to the SDLC. When code is insecure, it introduces vulnerabilities that get exploited. As security practitioners, this is where we come into the equation. However, that being said - we should be advocates for security in the development phase because it will make everyone's life easier once the software is deployed. We have to make a conscious effort to implement security that doesn't get in the way of business productivity. Every day, millions of corporate workers download files and email attachments, not knowing whether they could contain malware (such as viruses or Trojan horses). This happens even with appropriate use policies and warnings from administrators. How would you enforce such rules, without limiting the usability of workers' systems?

You must start a thread before you can read and reply to other threads