Chapter 2. Current Software Development Methods Fail to Produce Secure Software

In this chapter:

Software engineering companies and companies creating their own lines of business software have been looking forever for the classic “silver bullet” to deliver great quality software on time and under budget. As Fred Brooks mentions in the classic text The Mythical Man-Month, there is no such thing as the software silver bullet (Brooks 1995). The same lack of an easy solution applies to software security. In fact, we’re going to go one step further and say that present software engineering practice in the industry does not lead ...

Get Security Development Lifecycle now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.