The Silver Bullet Security Podcast

The sixth episode of the show features an interview with Michael Howard, the Senior Security Program Manager of Microsoft’s Security Technology Unit. Michael has been at Microsoft since 1992 and discusses what it has been like watching the company come to grips with software security. Michael continues to play a key roll in implementing the Trustworthy Computing Initiative at Microsoft. Gary and Michael also discuss the security features of Windows Vista and Michael’s recommendations for the two most important best practices when developing secure software. Listen for a startling revelation about Michael’s choice of a “desert island book.”

• Michael Howard’s blog
• Writing Secure Code by Michael Howard
• Wikipedia: Defense in Depth
• Microsoft’s Trustworthy Computing Security Development Lifecycle
• Matt Bishop’s computer security books - These would go with Michael to a desert island.
• Michael Howard - but not the one Gary interviewed.

 

 Show 006 - An Interview with Michael Howard [25:46m]: Play Now | Play in Popup | Download (3350)

The fifth edition of the Silver Bullet Security Podcast features Ed Felten, Professor of Computer Science and Public Affairs at Princeton University and the Director of the Center for Information Technology Policy. Gary and Ed take a look at Ed’s predictions for 2006 and how he’s faring so far and then discuss Ed’s relationship with his former adversaries. They also talk about how to discuss difficult technology issues with lawmakers and the importance of public policy and the law to computer scientists. Ed also outlines the challenges of raising a bright 11-year-old.

• A partial transcript of the interview in IEEE Security & Privacy
• Freedom to Tinker - Ed Felten’s blog
• Ed’s Predictions for 2006
• Wikipedia: Series of Tubes
• Subscribe to IEEE Security & Privacy

 

 Show 005 - An Interview with Ed Felten [22:55m]: Play Now | Play in Popup | Download (3754)

In the fourth episode of the Silver Bullet Security Podcast, Gary’s guest is Dana Epp, CEO and founder of Scorpion Software. Dana also runs a popular software security blog and is a jazz trumpeter. On this show, Dana and Gary talk about past programming disasters (”code lives forever”), the security implications of systems with ever-increasing complexity, suggestions for new developers interested in learning about software security, regulation’s role in information security, and Miles Davis.

• SilverStr’s blog - Dana’s blog
• It’s Pat!
• RemoteAccess BBS
• The 5 Rules of the Regulatory Process
• Chris Botti
• SC-L List
• Bitches Brew
• Subscribe to IEEE Security & Privacy

 

 Show 004 - An Interview with Dana Epp [24:28m]: Play Now | Play in Popup | Download (3837)

In the third episode of the Silver Bullet Security Podcast, Gary talks with Marcus Ranum, who is an acclaimed security guru widely credited with inventing the proxy firewall. Marcus and Gary discuss why Marcus thinks we’re not making progress in the computer security field, how common sense would help computer security, Richard Feynman, and power tools for home repair and improvement.

• A partial transcript of the interview in IEEE Security & Privacy
• Ranum.com
• BlackHat Keynote ‘97 (MP3)
• The Six Dumbest Ideas in Computer Security
• Old West Snake Oil
• Patch Tuesday
• Richard Feynman
• DeWalt cordless screwdriver
• Subscribe to IEEE Security & Privacy

 

 Show 003 - An Interview with Marcus Ranum [22:56m]: Play Now | Play in Popup | Download (2541)

In this episode of the Silver Bullet Security Podcast, Gary chats with Dan Geer, Chief Scientist at Verdasys. Dan has a Ph.D. in biostatistics from Harvard. He and Gary discuss the need to understand both technology and business in order to be a good security practitioner, Dan’s paper Cyber Insecurity, his work on Project Athena, and livestock.

• A partial transcript of the interview in IEEE Security & Privacy
• Dan Geer on Wikipedia
• Cyber Insecurity: The Cost of Monopoly (PDF)
• Project Athena on Wikipedia
• How Much Information 2003
• Subscribe to IEEE Security & Privacy

 

 Show 002 - An Interview with Dan Geer [22:24m]: Play Now | Play in Popup | Download (3757)

In the debut episode of the Silver Bullet Security Podcast, Gary talks with Avi Rubin, professor of computer science and technical director of the information security institute at Johns Hopkins University. Avi made headlines in 2003 when he revealed glitches in Diebold electronic voting machines.

Links:

• A partial transcript of the interview in IEEE Security & Privacy
• Avi’s site
• Brave New Ballot: The Battle to Safeguard Democracy in the Age of Electronic Voting, Avi’s forthcoming book
• ACCURATE - A Center for Correct, Usable, Reliable, Auditable, and Transparent Elections
• Froot Loops and Corn Flakes
• Subscribe to IEEE Security & Privacy

 

 Show 001 - An Interview with Avi Rubin [20:03m]: Play Now | Play in Popup | Download (7140)