A Hard Look at Software Security
In Season 2 of our podcast series, we’ll discuss the implications and mandates generated by Veracode’s most recent State of Software Security report. Our industry experts will pick up from Season 1’s highlights to take a closer look at application security today. Listeners will learn more about:
The impact security debt is having across industries
The changing attitudes and priorities put around application security
How the average number of days to fix software flaws has almost tripled since the last report
The case for scanning early and often
Sponsor Podcast in Partnership with Veracode
Unresolved flaws: security debt grows deeper
Episode 08
A Hard Look at Software Security
Jan 15, 2020
11 mins
Overview
The average number of days to fix software flaws was at 59 days in the first Veracode State of Software report from ten years ago. Today, it’s jumped to 171 days in the latest 2019 report.
While typical median fix times haven't gotten worse in 10 years – they have remained about the same - security debt is getting much deeper.
In this episode of a Hard Look at Software Security, Chris Eng, Vice President of Research with Veracode, will discuss relevance of the findings on median time to remediate flaws - and where organizations may stand when it comes to their own security debt.
Listeners will learn about:
- Why security debt is getting much deeper
- If fixes are based on flaw severity or exploitablilty
- Why the source of an application affects fix speed of remediation