I was a software developer for 15 years. My experience was that security was an afterthought with both clients and developers; if you got to the stage where things were more-or-less working at an acceptance testing level, then you could start adding more features, rather than making your software more robust and secure.
|