Dr. Dobb’s: Safelight Sends C/C++ Coders Back to Security School
Coverage of Safelight’s newest on-demand course for developers, Secure C/C++ Coding, released on June 20.
Coverage of Safelight’s newest on-demand course for developers, Secure C/C++ Coding, released on June 20.
Security expert Rob Cheyne, CEO of Safelight Security Advisors, explains how organizations can get started with security training programs. Cheyne said a good first step is a risk assessment.
Security awareness training is a growing movement, according to experts and analysts. Failed audits, data breaches and other factors that put intellectual property and other sensitive data at risk has forced companies to try and instill security into its employees, said Rob Cheyne, founder and CEO of Providence, R.I.-based Safelight Security Advisors.
Safelight has announced the availability of its Security Education Blueprint, a tool designed to help companies develop a security education program that matches their employees’ needs.
(10 February 2011)
Safelight is releasing its security education blueprint, an interactive tool that enables organizations to assess the information security needs of their personnel and develop an appropriate security educational program based on that assessment.
Safelight CEO Rob Cheyne discusses the role enterprise end users play in data security, underscoring the need for security awareness programs that reach all employees.
Safelight CEO Rob Cheyne talks with Threatpost’s Dennis Fisher about why security is every employee’s responsibility and how companies can shift the way they communicate with users about the value of information and their role in protecting it.
While many developers have heard of the common attacks such as SQL injection and cross-site scripting, most have not actually seen the attacks fully exploited. “Until people see the repercussions they are not inclined to go back into their code and clean up the issues, which leads to the state we’re in today,” said Rob Cheyne, CEO, Safelight Security Advisors.
The application security classes Rob teaches and Safelight’s online learning courses feature training that shows developers what they’re really up against when it comes to these types of attacks.
View Safelight’s cross-site scripting and SQL injections demonstrations on YouTube here.
Rob Cheyne talks to CSTechCast about why secure code is lacking, and what can be done about it. What are some of the common mistakes developers make, the biggest security misconceptions and how best to balance business and IT security requirements? Listen to the podcast.
Some of the reasons developers don’t use tools: Not needing the functionality, they’re not part of the development process, and it’s hard to convince management they’re necessary. Rob Cheyne, founder and CEO, Safelight Security Advisors, weighs in on these issues and points to debuggers as an example of a tool category that took some time to catch on. “The tools that truly improve ROI will always be adopted in the long run,” says Cheyne.
Rob is an expert in training development teams on application security and can be contacted at rcheyne@securityadvisors.com