Re: Cost to fix bugs pre-production

[Peter Wood <peterw () firstbase co uk>]

I did some research last year on this topic and have these two links:

www.sbq.com - Hoover database (@Stake)
http://www.csds.uidaho.edu/~hummer/index.htm - University of Idaho Hummer 
project

regards
Pete

At 21:01 25/11/2003, Mark Curphey wrote:
>A while back I read a research paper that compared some figures for the
>financial cost of fixing an application security bug when it is in
>development, pre-production and then finally in production. I have lost the
>link. Does anyone know of any such papers ?
>
>Has anyone ever seen a study of the cost of fixing a problem occurring from
>code review against the cost of fixing an issue that got into production and
>had to be retrofitted ?

----------------------------------------------------------
Peter Wood
Chief of Operations
First Base Technologies
+44 (0)1273 454525
www.fbtechies.co.uk
www.white-hats.co.uk