It Doesn't Take Much to Be Above Average

This talk examines common application security shortcomings in small software companies and practical ways to address them without large investments. It draws on analyses of software companies and their security practices.