Software Security Clue Distribution:
Can we teach things like security?

My keynote talk has already occurred

Here is what I plan to discuss

And there are pictures too!

Slide 5

Pop quiz

Commercial security is reactive

Builders versus operators

Making software behave is hard

Attaining software security is even harder

Software complexity growth

Software vulnerability growth

Science please

Security problems are complicated

BUG: The dreaded buffer overflow

Pervasive C problems

FLAW: Architectural problems with Java

Breaking stuff is important

Software security critical lessons

Slide 20

Software security in the SDLC

The trouble with design

Saltzer and Schroeder: Security principles

Ten guiding principles for secure design

Open questions

Twelve guidelines for writing safer Java

Problem: Serialization

Fix: Serialization

Fix: Serialization

Slide 30

Software security in the curriculum

Some places and courses

And in conclusion…what John said

Pointers