2007-10-10 CERIAS - What Every Engineer Needs To Know About Security And Where To Learn It
Recorded: 10/10/2007
CERIAS Security Seminar at Purdue University
What Every Engineer Needs To Know About Security And Where To Learn It
Neil Daswani, Google
This talk discusses how engineers can go about learning what they needto know to prevent the most significant emerging data security vulnerabilities, and the impact these vulnerabilities are having on electronic commerce. I'll review how attacks such as XSRF (Cross-Site-Request-Forgery) and SQL Injection work, and how to defend against them. I'll present some industry-wide statistics on software security vulnerabilities reported to various databases, and emerging trends in the field of software security. Finally, I'll discuss the current state of security education, and provide pointers to certification programs, books, and organizations where engineers can learn more.
(Visit: www.cerias.purude.edu)