Caleb Sima

Industry analysts have estimated that over 70% of today's security breaches occur at the application level. Many are due to the exploitation of security defects within the code. Microsoft's renewed commitment to security has focused the development community on the need to develop secure Web applications. With this in mind, Microsoft has added a tremendous number of features to the .NET environment to aid developers in creating secure applications. For example, authentication has become an integrated part of the development environment and debug messages are now disabled by default. With these improvements, developers are now realizing the need to integrate security into their Web application development process. Web applications can take many forms - including an infor... (more)

Viewing Security as a Process - Security isn't a one-time event in the application development life cycle

According to a 2002 study by the National Institute of Standards and Technology (NIST), buggy software costs the national economy $60 billion, more than a third of which could be saved through improved software testing alone. Delivering quality applications to the market has become a mandatory requirement as enterprises learn that the cost of fixing security defects after deployment is ... (more)