CERN Computing Seminar

Creating Secure Software

by Mr Sebastian Lopienski (CERN)

Europe/Zurich
IT Auditorium (CERN)

IT Auditorium

CERN

Description

Computer security has been an increasing concern for IT professionals for a number of years, yet despite all the efforts, computer systems and networks remain highly vulnerable to attacks of different kinds. Design flaws and security bugs in the underlying software are among the main reasons for this situation.

This lecture addresses the following question: how to create secure software? The lecture starts with a definition of computer security and an explanation of why it is so difficult to achieve. It then introduces the main security principles (like least-privilege, or defense-in-depth) and discusses security in different phases of the software development cycle. The emphasis is put on the implementation part: most common pitfalls and security bugs are listed, followed by advice on best practice for security development.


Organised by: Miguel Angel Marquina
Computing Seminars /IT Department

more information
Slides