In the words of Bruce Schneier - "Security is a process, not a product" [1] Process that could help mitigate this bugs - - Security / safe coding training -

In the words of Bruce Schneier - "Security is a process, not a product" [1] Process that could help mitigate this bugs - - Security / safe coding training - Code audits - Testing - static and dynamic - Policies that are communicated such as "Always use prepared statements" or "use X framework" [1] https://www.schneier.com/crypto-gram/archives/2000/0515.html https://www.schneier.com/crypto-gram/archives/2000/0515.html