Third Party Components
Utilizing mature libraries for high-risk tasks like SSL and image parsing is crucial for maintaining security. When libraries are scarce, careful evaluation or self-development is necessary. Establishing a robust internal process for tracking third-party software can prevent significant vulnerabilities, ensuring that all components are regularly reviewed and updated.In this clip
From this podcast
Software Engineering Radio - the podcast for professional software developers
SE-Radio Episode 330: Natalie Silvanovich on Attack Surface Reduction
Related Questions
Is code security a growing concern?
Why is secure coding important in the context of SE-Radio Episode 330: Natalie Silvanovich on Attack Surface Reduction and Designing Secure Features?
Is code security a growing concern as discussed in the episode SE Radio 637: Steve Smith on Software Quality and the clip Performance and Security?