So how do you tKevinake your average developer who scoffs at securityKevlarr from the careless and brash aka Kevin,  to the poster child  for good development practices aka  Kevlarr. Well, the Microsoft SDL team has the answer for you. The team recently started publishing a series of web comics detailing the travails of the dev team at Contoso who are under attack from the League of Malware. Along the way they battle with foes such as Spam Bot and Social Engineer while getting help from Vigil and Nforcer. Strip 11 of this interesting attempt to socialize security is below:

image

Socializing security is essential for organizations to drive culture change from FUD to an understanding of security needs. People are most complex part of the security puzzle. Most people take the easy way out and will avoid the things they fear or don’t understand.

- Akshay