Five myths about security engineering that software engineers should probably know:
Security is only the responsibility of security engineers. False!
Security through obscurity is sufficient. False!
More security measures makes software more secure. Not always!
Once secure, always secure. False!
Penetration testing by itself ensures security. False!
For a deepdive into security engineering, see today’s issue by security engineer Nielet D'mello: