By Dan Cornell
Denim Group got a mention in Gary McGraw's latest InformIT article on software security. The article does a great job of tracking trends in the software security space over the past couple of years. I didn't think it did a great job of communicating the full range of software security services we provide, but - hey - there is no such thing as bad press!
The key trend we have seen that is also picked up on in this article is that application (or software) security has moved from being attacked outside-in by security folks and instead is being addressed inside-out by developers with guidance from security teams. At the end of the day, developers are going to have to remediate security defects and build new applications securely. The sooner they get on board the sooner an organization will be able to adequately address software security risks.
--Dan
dan _at_ denimgroup.com
hi dan,
Glad you liked the article. Sorry I didn't have room to include your list of services. As you know, I've been involved in this space for a long time and I am very pleased to see it continue to grow...and even in the right directions! Glad you guys are helping.
In my view key trends are: toward white box analysis instead of outside->in black box, out of the myopic focus on Web apps, and toward full-lifecycle programs based on the touchpoints that I espouse in "Software Security". The numbers show this growth and these trends objectively.
gem
company www.cigital.com
podcast www.cigital.com/silverbullet
blog www.cigital.com/justiceleague
book www.swsec.com
Posted by: gem | August 12, 2008 at 12:15 PM