Pressure mounts for building in security during application development
Security has seldom been a priority in application development, but pressure from businesses stuck patching faulty software is having an impact on the industry.
Among the large software makers that have seen the light is Microsoft, which is pushing Windows developers to adopt a standard methodology and framework for building secure applications.
In April, Oracle got religion with Java, which is notorious for vulnerabilities, and said it would delay the next major upgrade, so engineers could work on plugging holes. Prioritizing security during the development process leads to fewer holes that hackers can exploit, experts agreed Friday. Higher quality software also means fewer patches, which reduces maintenance costs for vendors and customers.