How maverick developers can create risk in the software and IoT supply chain

Abstract

Mavericks are highly creative people that often buck rules and convention to pursue their innovative genius. In many ways, software developers are the mavericks in the software supply chain. Hollywood depicts them as the partying ‘bad boys/girls’ in such popular productions as Valley and The Social Network Software developers are essential for powering innovation in Silicon Valley. However, they are also injecting security risk into the software supply chain. By changing attitudes about who is responsible for security around third-party component usage, and educating teams about what can be done to discover, manage and remediate issues involving these components, modern software developers can build security into an environment where much of the code is written by someone outside their organisation, says Jeff Luszcz of Flexera Software.