Pressure mounts for building in security during application development
Microsoft survey of IT pros and developers worldwide found only 37% worked for organizations that built products with security in mind
Application Security
Application security, web app security, secure code development and software vulnerabilities
Application Security articles
Experts ding DHS vulnerability sharing plan as too limited
Without universally availability, plan could miss smaller businesses hackers could use as an entry point to critical infrastructure companies
In a sea of malware, viruses make a small comeback
Microsoft has noticed a small uptick in viruses that infect files
Fed offensive fueling hacker underground, report says
With the government said to be the biggest buyer of malicious tools, some fear it will weaken the nation's cyber defenses -- public and private
Health care breach victims plummet
Tougher rules and big settlements are said to be behind the fall in affected clients, but one group calls it the 'calm before the storm'
Adobe releases critical security updates for Reader, Flash Player and ColdFusion
One of the patched ColdFusion flaws is already targeted by attackers
Microsoft rushes Explorer 8 patch release
Microsoft's Patch Tuesday for May addresses 10 security issues, three of them that need to be addressed immediately
Companies, government unprepared for new wave of cybersabotage
Intelligence not the only part of government that has struggled. Senate has not moved on legislation to back President's order on cybersecurity
It's better to call ahead before sending malware, Symantec finds
French-speaking organizations are receiving bogus calls asking them to check an invoice, which is actually malware
Labor Department hackers more sophisticated than most
Security pro says attacks designed for further breaches, noting, 'They're not gathering this information and sending it home for no reason'
MORE GREAT APPLICATION SECURITY RESOURCES
Still hungry? Here are links to application security books, associations, and other information resources to help you find (and avoid) vulnerabilities and build secure software and websites.
The Web Application Hacker's Handbook: Discovering and Exploiting Security Flaws
by Dafydd Stuttard (2011). On Amazon.com.
24 Deadly Sins of Software Security: Programming Flaws and How to Fix Them
by Michael Howard (2010). On Amazon.com
Gray Hat Hacking The Ethical Hackers Handbook, 3rd Edition
by Allen Harper (2011). On Amazon.com.
OWASP, the Open Web Application Security Project.
BSIMM, the Building Security In Maturity Model.
Also see Application and software security certifications in CSOonline's Security Certification Directory.
