Published June 2, 2016
| Version v1
Journal article
Open
Software Without Brakes
Description
When the security officer of a company pulls the emergency brake and the release of an application is halted immediately, it’s time for crisis: How long does it take to implement decent input validation in the application? How long to replace the databases that are vulnerable to SQL injection with Prepared Statements? Or a solid Session Management that respects the data model of the application and integrates seamlessly into the existing application without bothering existing components? And who pays for all this?
Notes
This paper was written in 2016 as part of a research project at scip AG, Switzerland. It was initially published online at https://www.scip.ch/en/?labs.20160602 and is available in English and German. Providing our clients with innovative research for the information technology of the future is an essential part of our company culture.