Why You Need an Application Security Program

by Johannes B. Ullrich, PhD
Sept. 1, 2017 0 comments SANS Institute

More than a decade ago, when investigating an IRC server used by a criminal gang to control compromised systems, we noted something interesting: The systems connecting were not just home and small business systems. There were also a large number of enterprise and government systems caught in the trap.1