Secure Coding mailing list archives

"Bumper sticker" definition of secure software


From: michaelslists at gmail.com (mikeiscool)
Date: Fri, 21 Jul 2006 08:26:13 +1000

On 7/21/06, Florian Weimer <fw at deneb.enyo.de> wrote:
* Brian A. Shea:

My slogan:

Unsecured Applications = Unsecured Business

Which is completely acceptable if you and your business partners are
aware of the risk level at which your are running your company.

Secure software costs more, requires more user training, and fails in
hard-to-understand patterns.  If you really need it, you lose.

Really secure software should require _less_ user training, not more.

-- mic


Current thread: