The usual training suggests came up, but at the end of the day, and this will no doubt enrage some of you, we can’t train developers to write secure code. Just because you can’t train someone to write secure software you can teach them to understand the problem (or a subset of it). We won’t fix auto safety with training any more than we will fix software security with training.