Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security SecProg
[Top] [All Lists]

Re: Charging customers on security

Subject: Re: Charging customers on security
Date: 1 Oct 2004 12:36:52 -0000
In-Reply-To: 
<75C025AE395F374B81F6416B1D4BDEFB01C3C213@mtv-corpmail.microfocus.com>

I believe that if you surveyed car users and software users, you'd find far
more of the former are conscious of safety issues, than the latter are of
security issues.

What about surveying vehicle engineers on how they research and reuse other's 
mistakes? One thing I've noticed is that many applications are being developed 
by programmers who end up reinventing the wheel instead of following best 
practices, patterns, etc. The current client I am working for (large financial 
institution) has a difficult time with the concept of researching patterns, or 
having architects review systems to catch common patterns, etc.

If developers stopped reinventing the wheel, did research, reviewed and 
followed best practices and patterns, do you think that this would inherantly 
make security cheaper and easier to implement? 

<Prev in Thread] Current Thread [Next in Thread>