Darkreading: Secure Coding Certification

[gem at cigital.com (Gary McGraw)]

Hi all,

As readers of the list know, SANS recently announced a certification scheme for secure programming.  Many vendors and 
consultants jumped on the bandwagon.  I'm not so sure the bandwagon is going anywhere.  I explain why in my latest 
darkreading column:

http://www.darkreading.com/document.asp?doc_id=123606

What do you think?  Can we test someone's software security knowledge with a multiple choice test?  Anybody seen the 
body of knowledge behind the test?

gem

company www.cigital.com
podcast www.cigital.com/silverbullet
blog www.cigital.com/justiceleague
book www.swsec.com