In Season 2 of our podcast series, we’ll discuss the implications and mandates generated by Veracode’s most recent State of Software Security report. Our industry experts will pick up from Season 1’s highlights to take a closer look at application security today. Listeners will learn more about:The impact security debt is having across industriesThe changing attitudes and priorities put around application securityHow the average number of days to fix software flaws has almost tripled since the last reportThe case for scanning early and oftenSponsored by Veracode
All content for A Hard Look at Software Security is the property of Foundry and is served directly from their servers
with no modification, redirects, or rehosting. The podcast is not affiliated with or endorsed by Podjoint in any way.
In Season 2 of our podcast series, we’ll discuss the implications and mandates generated by Veracode’s most recent State of Software Security report. Our industry experts will pick up from Season 1’s highlights to take a closer look at application security today. Listeners will learn more about:The impact security debt is having across industriesThe changing attitudes and priorities put around application securityHow the average number of days to fix software flaws has almost tripled since the last reportThe case for scanning early and oftenSponsored by Veracode
The average number of days to fix software flaws was at 59 days in the first Veracode State of Software report from ten years ago. Today, it’s jumped to 171 days in the latest 2019 report.
While typical median fix times haven't gotten worse in 10 years – they have remained about the same - security debt is getting much deeper.
In this episode of a Hard Look at Software Security, Chris Eng, Vice President of Research with Veracode, will discuss relevance of the findings on median time to remediate flaws - and where organizations may stand when it comes to their own security debt.
Listeners will learn about:
Why security debt is getting much deeper
If fixes are based on flaw severity or exploitablilty
Why the source of an application affects fix speed of remediation
Produced by IDG Communications, Inc., in association with Veracode.
A Hard Look at Software Security
In Season 2 of our podcast series, we’ll discuss the implications and mandates generated by Veracode’s most recent State of Software Security report. Our industry experts will pick up from Season 1’s highlights to take a closer look at application security today. Listeners will learn more about:The impact security debt is having across industriesThe changing attitudes and priorities put around application securityHow the average number of days to fix software flaws has almost tripled since the last reportThe case for scanning early and oftenSponsored by Veracode