{"id":18424,"date":"2024-09-09T11:11:52","date_gmt":"2024-09-09T10:11:52","guid":{"rendered":"https:\/\/telecomkh.info\/?p=18424"},"modified":"2024-09-09T11:11:52","modified_gmt":"2024-09-09T10:11:52","slug":"the-linux-foundation-and-openssf-release-report-on-the-state-of-education-in-secure-software-development","status":"publish","type":"post","link":"https:\/\/telecomkh.info\/?p=18424","title":{"rendered":"The Linux Foundation and OpenSSF release report on the state of education in secure software development"},"content":{"rendered":"

Findings show nearly one-third of industry professionals are not familiar with secure software development practices<\/strong><\/p>\n

Linux Foundation Research and the Open Source Security Foundation (OpenSSF) are pleased to release a new report titled \u201cSecure Software Development Education 2024 Survey: Understanding Current Needs.\u201d Based on a survey of nearly 400 software development professionals, the analysis explores the current state of secure software development and underscores the urgent need for formalized industry education and training programs.
\nAttackers consistently discover and exploit software vulnerabilities, highlighting the increasing importance of robust software security. Despite this, many developers lack the essential knowledge and skills to effectively implement secure software development. Survey findings outlined in the report show nearly one-third of all professionals directly involved in development and deployment \u2014 system operations, software developers, committers, and maintainers \u2014 self-report feeling unfamiliar with secure software development practices. This is of particular concern as they are the ones at the forefront of creating and maintaining the code that runs a company\u2019s applications and systems.
\n\u201cTime and again we\u2019ve seen the exploitation of software vulnerabilities lead to catastrophic consequences, highlighting the critical need for developers at all levels to be armed with adequate knowledge and skills to write secure code,\u201d said David A. Wheeler, director of open source supply chain security for the Linux Foundation. \u201cOur research found that a key challenge is the lack of education in secure software development. Practitioners are unsure where to start and instead are learning as they go. It is clear that an industry-wide effort to bring secure development education to the forefront must be a priority.\u201d OpenSSF offers a free course on developing secure software (LFD121) and encourages developers to start with this course.
\nSurvey results indicate that the lack of security awareness is likely due to most current educational programs prioritizing functionality and efficiency while often neglecting essential security training. Additionally, most professionals (69%) rely on on-the-job experience as a main learning resource, yet it takes at least five years of such experience to achieve a minimum level of security familiarity.<\/p>\n

Other key findings of the survey include the following:
\n\u2022 Lack of time (58%) and lack of awareness and training (50%) are the top two most common challenges in implementing secure software development practices within organizations.
\n\u2022 The top reason (44%) for not taking a course on secure software development is lack of knowledge about a good course on the topic.
\n\u2022 Self-directed learning methods were most prevalent, with 74% of respondents reporting using such resources as online tutorials, videos, and books as their main learning method.
\n\u2022 Emerging security concerns such as AI (57%) and supply chain (56%) are seen as critical future areas for innovation and attention.<\/p>\n

\u201cThe first step in addressing secure software development is recognizing the existing knowledge gap and identifying priority areas for creating additional training,\u201d said Christopher \u201cCRob\u201d Robinson, Intel, co-chair of the OpenSSF Education Special Interest Group (SIG) and chair of the OpenSSF Technical Advisory Council (TAC). \u201cBased on these findings, OpenSSF will create a new course on security architecture which will be available later this year which will help promote a \u2019security by design\u2019 approach to software developer education.\u201d<\/p>\n

Above, image credited to the Linux Foundation<\/em><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

Findings show nearly one-third of industry professionals are not familiar with secure software development practices Linux Foundation Research and the Open Source Security Foundation (OpenSSF) are pleased to release a new report titled \u201cSecure Software Development Education 2024 Survey: Understanding Current Needs.\u201d Based on a survey of nearly 400 software development professionals, the analysis explores … <\/p>\n

Continue reading \u00abThe Linux Foundation and OpenSSF release report on the state of education in secure software development\u00bb<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":18425,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[24],"tags":[],"_links":{"self":[{"href":"https:\/\/telecomkh.info\/index.php?rest_route=\/wp\/v2\/posts\/18424"}],"collection":[{"href":"https:\/\/telecomkh.info\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/telecomkh.info\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/telecomkh.info\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/telecomkh.info\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=18424"}],"version-history":[{"count":1,"href":"https:\/\/telecomkh.info\/index.php?rest_route=\/wp\/v2\/posts\/18424\/revisions"}],"predecessor-version":[{"id":18426,"href":"https:\/\/telecomkh.info\/index.php?rest_route=\/wp\/v2\/posts\/18424\/revisions\/18426"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/telecomkh.info\/index.php?rest_route=\/wp\/v2\/media\/18425"}],"wp:attachment":[{"href":"https:\/\/telecomkh.info\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=18424"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/telecomkh.info\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=18424"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/telecomkh.info\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=18424"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}