Ounce in the News

Keeping Code Secure: Should Government Get Involved?

08/01/2007, SD Times

Summary
The entry of big players such as HP and IBM into a market of application security assessment made up of small startups is likely to boost the message that the key to keeping applications secure is writing code that is inherently harder to attack. However, it remains a question whether the government should get involved in mandating an application or source code security standard in production. Although most believe unlikely, companies like code analysis tool maker Ounce Labs observes that government-sponsored awareness campaign of web application vulnerabilities could be a driving force. It is believed such standards would be carried out by Cyber Security and Telecommunications of DHS if they should happen, as secure programming guidelines have been published on DHS web site. A more likely way for DHS to get involved in the application security arena is working to promote best practices.

Read full article at SD Times

Find out more about source code security.