Tag · case study

Dealing with the “Security is Special” problem

Dealing with the “Security is Special” problem

posted on Jun 13, 2012 by Rohit Sethi Comments:0

In the last entry on cultural challenges in application security series, we introduced the “Security is Special” problem. We described the problem where application security issues hold a trump card over other development issues, and how that can erode the relationship between security & development. In our experience, insisting on high priorities for all security issues is one of…

Case Study: The Skeptic

Case Study: The Skeptic

posted on Apr 30, 2010 by sahba Comments:0

James Smith* was the manager of information security at a large healthcare company. After several years of primarily running penetration testing, and a few limited source code reviews, James successfully made the case to internal IT leadership that security needed to come earlier in the software development life cycle (SDLC). James had heard many people…