Reactive or proactive --- Hi Bennette, answering your question I'm afraid that being reactive is the most common way to fix security breaches, in my opinion this comes from curiosity and I'll explain why with a simple metaphor. If you just finished building your house, you'll spend more time using it than searching for possible mistakes you made while building it, but if someone that is observant or curious comes and stays for a while might point out one or two things you made wrong or can improve from your house. The same happens with most of the software released nowadays if not all of it. This is worsened by the need from companies to release new software in less time in order to compete with the new releases from other companies, which give them less time for trials and therefore more flaws. Being proactive in my opinion, would require more time and effort from software development companies before the release of their products

Source author: Diego Alberto Estrada Ramos destrada@sre.gob.mx