UK developers prioritise security

A survey of attitudes to security conducted by Kingpin Intelligence and Microsoft has revealed that while both developers and the managers that commission them are passionate about securing code, security can suffer from contradictory time, hiring and budget pressures and that environments using managed code exhibit considerably fewer of these issues.

Of 300+ UK developers surveyed, 40% of those that work in unmanaged code environments felt that time allocations from management are a barrier to developing secure code. Developers who work in unmanaged code environments were also a third more likely to cite difficulties in hiring developers with sufficient skills in securing code as a hindrance to ensuring secure applications. Managed code environments were seen by those that use them as key to improving the speed and security of the development process – yet 54% of developers have not had a chance to use such tools thus far. Of those that have, 70% reported benefits such as easier code re-use and quicker development times overall. 78% of the developers surveyed felt that security was a top priority and 79% were confident that they have the skills to make it happen. The managers agreed, with over 84% feeling that the developers who work for them have more than enough skills to ensure secure applications.

Mark Quirk, Microsoft UK’s Head of Technology for Development and Platforms, commented: “This study shows a positive trend in skills and attitudes towards security, particularly where managed code frameworks like the .NET Framework are being used. Perhaps it’s unrealistic to expect security to be an integrated feature of every IT system in the way that any other feature is – but we will continue to promote that approach and to invest in frameworks, tools and guidance that make security on every project a no-brainer.”