The Goodness is Baked In: Baking Assurance into Software [Mentored by Davi Ottenheimer]

BSidesLV 2013

Presented by: Ebony
Date: Thursday August 01, 2013
Time: 17:00 - 17:50
Location: Florentine E
Track: Proving Ground

In an ever-changing world where the technological dependence is ever increasing — the government wants to provide transparency, everyone has 500+ friends on Facebook, your kids can use the computer better than you can, your bank allows transfers on the fly, you can meet your next first date (or your future ex) based on an algortihm, you can apply for a loan, or even look up medical records… In a world of Big Data, data mining, network breaches and the cloud, what is the first line of defense for your important, personal, private info?!

Software Assurance.

This talk will discuss the various definitions of software assurance, who it relates to, as well as the ownership. We will talk about the recent law that was passed National Defense Authorization Act of 2013 (NDAA) and what it means to software assurance and career developers everywhere. We’ll wrap up the discussion by highlighting some common vulnerabilities of software, suggestions for incorporating it into development and testing and finally several options for practice.

Ebony

Ebony is a Senior Software Engineer that started working on a website that initiated a C&A process and that experience resulted in an interest in Information Security. She is a self-proclaimed mediocre developer who uses common sense rather than expert technical skill to attack problems; a proud Mafiosa of the Tech Lady Mafia and she is known around the office as “The Pit Bull”. She holds a B.S. in Computer Science, an M.S.M. in Information Systems Security, several certifications including Certified Ethical Hacker, Security+, and Certified Information Systems Auditor and has attended several conferences including Schmoocon, Hacker Halted, BsidesDE, and Lady Hack


KhanFu - Mobile schedules for INFOSEC conferences.
Mobile interface | Alternate Formats