R&H Security Consulting, LLC
A massive threat: Insecure Software
¨Cost of poor security in the US alone between $22.2B and $59.5 billion per year (NIST)
–Cost per patch applied: $900 per server, $700 per client - Economist
¨
¨“75 percent of hacks happen at the application” - Gartner “Security at the Application Level”
¨
¨“Over 70 percent of security vulnerabilities exist at the application layer, not the network layer” - Gartner
¨
¨“If only 50 percent of software vulnerabilities were removed prior to production … costs would be reduced by 75 percent” - Gartner “Security at the Application Level”
¨
¨“64 percent of developers are not confident in their ability to write secure applications” - Microsoft Developer Research