Listen to the latest episode of the Secure Developer podcastListen now


Why can’t we Build Secure Software?

with Tanya Janca


A lot is expected of software developers these days; they are expected to be experts in everything despite very little training. Throw in the IT security team (often with little-to-no knowledge of how to build software) telling developers what to do and how to do it, and the situation becomes strained. This silo-filled, tension-laced situation, coupled with short deadlines and pressure from management, often leads to stress, anxiety and less-than-ideal reactions from developers and security people alike.

This talk will explain how job insecurities can be brought out by IT leadership decisions, and how this can lead to real-life vulnerabilities in software. This is not a talk about “feelings”, this is a talk about creating programs, governance and policies that ensure security throughout the entire SDLC. No more laying blame and pointing fingers, it’s time to put our egos aside and focus on building high-quality software that is secure.

The cause and effect of insecurities and other behavioral influencers, as well as several detailed and specific solutions, will be presented that can be implemented at your own place of work, immediately. No more ambiguity or uncertainty from now on, only crystal-clear expectations.

Further reading:

For free hands-on videos of the OWASP DevSlop team implementing various DevSecOps tools and concepts.


Application Security
Secure Development

Tanya Janca

Senior Cloud Advocate at Microsoft

About Tanya Janca

Tanya Janca is a senior cloud advocate for Microsoft, specializing in application security; evangelizing about software security and advocating for developers through public speaking, her open source project OWASP DevSlop, and various forms of teaching via workshops, blogs and community events. As an ethical hacker, OWASP Project and Chapter Leader, software developer, effective altruist and professional computer geek of 20+ years, she is a person who is truly fascinated by the ‘science’ of computer science.

We use cookies to ensure you get the best experience on our website.Read Privacy Policy