GoKawiilVeeracode exec lays out 10 long-horizon software security practices
A security industry figure who testified before Congress in 1998 about insecure software risks has published a list of 10 practices meant to keep software trustworthy over long timescales. The recommendations include embedding security into architecture from the start, maintaining continuous inventories of applications and dependencies, verifying all code regardless of origin, and making secure development paths the path of least resistance for developers.