Re: [SC-L] "Bumper sticker" definition of secure software

2006-07-17 Thread Holger.Peine
> From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Dave Aronson > If you really want to compress that to bumper-sticker size, how about > > "Secure Software: Does what it's meant to. Period." > > This encompasses both "can't be forced NOT to do what it's > meant to do", > a

Re: [SC-L] Web Services vs. Minimizing Attack Surface

2006-08-15 Thread Holger.Peine
> [mailto:[EMAIL PROTECTED] On Behalf Of John Wilander > Sent: Dienstag, 15. August 2006 10:03 > Subject: [SC-L] Web Services vs. Minimizing Attack Surface > > Hi! > > The security principle of minimizing your attack surface > (Writing Secure > Code, 2nd Ed.) is all about minimizing open socket

[SC-L] Need a few slides/data on surging importance of security and source code security

2006-10-17 Thread Holger.Peine
I am sure that quite a few of you already have done or know who has done this non-technical, "mundane" job: I need a few slides with data (e.g. numbers, or maybe historic examples) to convince a management-level audience of a manufacturer of networked appliances who has only a dim view of securit

[SC-L] University lecture on Sec Sw Eng online

2007-08-01 Thread Holger.Peine
I recently completed a lecture on secure software engineering, and I guess there a quite a few people on this list who could make use of some of the material, whether for their own presentations or simply for teaching themselves. The lecture was given at Kaiserslautern University of Technology as

[SC-L] CfP for 2nd Int. Workshop on Secure Software Engineering

2007-10-09 Thread Holger.Peine
Dear all, I think the following call for papers is highly relevant for readers of this list, so please pardon me to promote an event for the first time: Second International Workshop on Secure Software Engineering (SecSE 2008) In conjunction with ARES 2008