Programmed for Security Government Computer News (11/05/07) Vol. 26, No. 28, Jackson, William
as it appeared in the November 9, 2007 edition of ACM TechNews.
The promotion of improved software development is the goal of two recently announced initiatives, including the SANS Institute's introduction of a new Secure Software Programmers certification for several programming languages. The program was organized to address the academic community's failure to adequately train software developers, according to SANS research director Alan Paller. The institute's leaders believe students' demand for software training and certification will be stimulated by an industry-recognized credential, while 23 out of 42 people who participated in the first round of exams earned Graduate Studies and Special Programs certificates. Paller notes that the certification's uniqueness resides in the fact that it represents the first instance in which SANS has begun with an exam rather than courses and curriculum to teach certification basics. The other initiative is the formation of the nonprofit Software Association Forum for Excellence in Code (SAFEcode) by EMC, Microsoft, SAP, Symantec, and Juniper Networks in October, whose focus is the development and exchange of best practices for secure software development. SAFEcode executive director Paul Kurtz reports that many companies have internal programs focused on improving code quality, but their effectiveness has been hindered by poor communications; SAFEcode's objective is to develop best practices through the recognition of commonalities between the companies' practices. Kurtz says eventually SAFEcode members will collaborate with SANS on the development of solid coding curriculums. He asserts that SAFEcode seeks to enable cooperation between companies and with government and the academic community, and its first goal is the establishment of software assurance metrics. Click Here to View Full Article
