By: Steve Lipner, Executive Director, SAFECode
This week, the UK Government’s Department for Digital, Culture, Media and Sport (DCMS) released a Code of Practice for the secure design of internet-connected consumer devices and their associated services.

Over 150 security development professionals participated in an event sponsored in part by SAFECode recently in Cambridge, MA steps from the Massachusetts Institute of Technology.

Tania Skinner, Intel
Understanding the fundamentals of secure development and where to start is the message I delivered to an audience of software quality engineers, developers, testers and more at the Pacific Northwest Software Quality Conference (PNSQC). My technical presentation titled “Security Tsunami! SDL Fundamentals and Where to Start” was delivered October 8, 2018 in Portland, Oregon.

Tania Skinner, Product Security Strategist, Intel Corporation provides an overview of the guide, its contents and how to use it in this seven-minute podcast.

*First published August 20, 2018, in CSOonline
By Steve Lipner, Executive Director, SAFECode
Understanding the security of third-party components.

By: Altaz Valani, Research Director, Security Compass
At the IEEE Cybersecurity Development Conference in Cambridge, Mass on October 2nd, I will deliver my presentation “Rethinking Secure DevOps Threat Modeling: The Need for a Dual Velocity Approach” to an audience of cyber professionals.

By: Steve Lipner, Executive Director, SAFECode
Large organizations have benefited from establishing and adopting Security Development Lifecycle (SDL) processes as a key component of their approach to delivering secure software. Many of these organizations have hundreds or even thousands of developers, and significant resources to devote to creating and operating an SDL. But what about the smaller organizations whose teams and resources are limited? They too have access to resources that can help them to adopt an SDL capable of delivering the level of software security their customers expect.

*First published March 12, 2018, in CSOonline
By Steve Lipner, Executive Director, SAFECode
Why secure development programs succeed in organizations.

By Eric Baize, Chairman, SAFECode
Recently, I had the honor of delivering the opening keynote address for the OWASP AppSec California 2018 in Santa Monica. The audience (600+ attendees) was made up of security practitioners very knowledgeable about secure development. We engaged in very spirited conversations about driving better security by changing the software development culture.

*First published March 12, 2018, in CSOonline
By Steve Lipner, Executive Director, SAFECode
The security response process is a natural source of feedback for any software security program.