OWASP Global AppSec: How to nudge developers into implementing best security practices

Carrots work much better than sticks in fostering secure software development, a researcher said.