Why Read This
Application security is an essential tool for managing risks in today's increasingly dynamic and capable threat landscape. Yet the market for application security remains small, and organizations are making only tactical investments in application security measures. Evidence suggests that this trend will last for some time to come. However, the anticipation of an increasingly open and mobile enterprise should help refocus the spotlight on strategic investments in areas like application security. Security professionals who wish to see application security move up in IT's priority queue should take immediate steps such as demanding secure software from your suppliers and requiring rigorous acceptance tests for third-party code to help promote application security in the long run.