What Every Engineer Needs To Know About Security And Where To Learn It

Oct 10, 2007

Download: MP4 Video Size: 588.6MB  
Watch on YouTube

Abstract

This talk discusses how engineers can go about learning what they need
to know to prevent the most significant emerging data security vulnerabilities, and the impact these vulnerabilities are having on electronic commerce. I'll review how attacks such as XSRF (Cross-Site-Request-Forgery) and SQL Injection work, and how to defend against them. I'll present some industry-wide statistics on software security vulnerabilities reported to various databases, and emerging trends in the field of software security. Finally, I'll discuss the current state of security education, and provide pointers to certification programs, books, and organizations where engineers can learn more.