Software Security Education
As my previous blog mentioned, I am reading the book, The Software Developement Lifecycle, from Micheal Howard.
Inside the book, it outlined the important of security education. Basically, if your team member (developer, PM or QA) doesn't know what security is about, how can they build a security software.
So, to be able to build a secure software, all team member should have updated security knowledge. I tried to search for related topics from internet using both Google and Live. Almost all topics return to me is either related to security products or current event of security bugs.
Then, how can I keep my team member updated with security information using limited budget? Here are what I would recommend:
