Education & Training for Secure Software Development & Distribution
summary
Many developers lack formal secure-development training: industry surveys report a skills gap (46% to 57% saying shortages), about 4 million unfilled cybersecurity roles, and Ponemon finds 53% of organizations offer no secure‑coding training; only one of the top 24 CS programs requires it. The initiative provides a 16-hour course (CC BY text) covering requirements, design, reuse, implementation and verification, adds SCORM Connect for LMS integration, promotes hands‑on tools like OWASP SKF, warns tools and SBoMs aren’t silver bullets, and notes 90–95% common vulnerabilities dominate.
AI-written summary · about
chapters (7)
- 0:00Introduction and background
- 1:46The software security gap
- 7:01Analyzing training challenges
- 12:20Limitations of current solutions
- 16:47OpenSSF training initiatives
- 23:03Future goals and collaboration
- 31:46Questions and answers
related talks
28mSecure code from start; a journey through security training for developers
33mCan AppSec Training Really make a smart developer
21mWhy Unleashing Your Software Security Potential is Necessary & How to Achieve It
56mSo Long Secure Coding - Practical Steps for Securing the entire SDLC
51mShifting Knowledge Left: Keeping up with Modern Application Security
42mDeveloping a Secure, Open Future
31mTopics of Interest: Scaling AppSec through Education
59mOpen Application Security Curriculum Project