The need for improved security in software

Flaws in the software are and have been one of the largest attack surfaces on information systems. It is generally accepted that applications contain an average of 10 to as many as 50 flaws per 1,000 lines of code.

With operating systems containing tens of millions of lines of code, and many applications requiring millions of lines of code, the average computer will have more than a million flaws in the software that it runs. Each of these flaws is a vulnerability that could lead to a complete compromise of the system and its data and is often used as the stepping stone to compromising multiple systems within an enterprise.

Typically, the more mature software development companies produce applications with ...

Get CISSP Training Kit now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.