It's a scenario with which many Java developers are all too familiar - and
one which many fear. You log on to the network or arrive at the office to
discover your Chief Security or Compliance Officer, Application Manager or
even a VP of Sales and Marketing in a state of panic. A commonly used open
source component has a serious security vulnerability that may expose your
client-facing applications to attack. Even worse, the flaw was identified a
few weeks ago, but your organization has just heard about it.
The questions and accusations fly: "Why are we using open source components
for our critical business applications?!" "Why don't we just rip out this
component and replace it with something more secure?" "Do you have any idea
what will happen if people discover that our applications have a security
flaw?!" "This could negatively impact revenue and our reputation!" ... (more)
SI International (www.si-intl.com) is a provider of information technology
and network solutions, primarily to the United States government, But due to
its continued success in defining, designing, building, deploying, and
operating mission-critical solutions for the Department of Defense and
several federal civilian agencies, business at SI International (SI) has been
strong and growing.
Yet with big growth, a systems integrator also faces an influx of request for
proposals (RFPs) to support and manage. For SI, this caused a heavy load of
manual and time-consuming in-house proj... (more)