Becoming a Security Expert

Anyone involved in the software industry should learn a few facts and skills that relate to software security. A small number of skills exist that anyone in the software development business can learn to improve software security. Whether you're a developer, architect, or tester, it's important that you understand the nature of the constantly evolving security landscape and build defenses into applications at the design phase, never trust input, and then verify that the input handling is robust in the face of intentionally malformed data. Knowing these skills and applying them will lead to more secure software.

[1]  Michael A. Howard,et al.  A process for performing security code reviews , 2006, IEEE Security & Privacy.