Without infinite resources, software development teams must prioritize security fortification efforts to prevent the most damaging attacks. The Protection Poker "game" is a collaborative means for guiding this prioritization and has the potential to improve software security practices and team software security knowledge.
No takes yet. Share an insight, caveat, or question.
Williams et al. (2010) studied this question.
Synapse has enriched 5 related papers. Consider them for comparative context: