Security and Software Development

[rachelrosemond]

I found this article that seems interesting. It talks about software security related to Java, and how developers are copying code from SO, which is out of date or incorrect, and using them in there projects.

I personally favor books over SO/internet, but even books eventually become out of date, and surprisingly some are still available today.

How do developers learn software security? Is it a course in Computer Science? From general research, it seems that security changes from time to time, developers disagree on what is considered proper practice. Do you learn it from job experience, you learn as you go along?

[Larz60+]

Usually from getting bit.
It's normally a subject that most programmers know about,
and may even know about the major security issues (usually do, actually),
but because of the constantly changing nature of the subject, only delve
into it when that have been bitten.
Unless, of course, their work is in security software.

There are many good books available on the subject, and
full degree programs are available , as well as online courses.
Here's one: https://ocw.mit.edu/courses/electrical-e...ring-2014/

[brendag]

Developers learn software security through a combination of sources. It often begins with formal education, such as computer science courses that cover security fundamentals. However, staying updated is crucial, and this involves continuous learning from up-to-date resources, industry standards, and real-world job experience. Given the dynamic nature of software security, keeping abreast of the latest developments is vital, especially in areas like IoT, where security challenges in logistics can evolve rapidly.

buran write Sep-15-2023, 09:58 AM:
Click-bite link removed

[gluke15]

Given the dynamic nature of software security, continuous learning and staying updated on the latest security developments are essential. This may involve keeping up with security blogs, participating in security-focused communities, and attending relevant conferences and events to remain well-informed about evolving security practices and techniques.