About
Computer security has been an increasing concern for IT professionals for a number of years, yet despite all the efforts, computer systems and networks remain highly vulnerable to attacks of different kinds. Design flaws and security bugs in the underlying software are among the main reasons for this. This lecture addresses the following question: how to create secure software? The lecture starts with a definition of computer security and an explanation of why it is so difficult to achieve. It then introduces the main security principles (like least-privilege, or defense-in-depth) and discusses security in different phases of the software development cycle. The emphasis is put on the implementation part: most common pitfalls and security bugs are listed, followed by advice on best practice for security development. The last part of the lecture covers some miscellaneous issues like the use of cryptography, rules for networking applications, and social engineering threats. This lecture was first given on Thursday, February 24th, 2005 at the Inverted CERN School of Computing 2005. Bibliography and further reading are available at http://cern.ch/Sebastian.Lopienski/Security.
0:00:00 Slide 1
0:03:43 Slide 2
0:07:25 Slide 3
0:14:49 Slide 4
0:22:13 Slide 5
0:29:37 Slide 6
0:37:01 Slide 7
0:44:25 Slide 8
0:51:49 Slide 9
0:59:13 Slide 10
1:06:37 Slide 11
The talk
Credits and licence
- Institution
- CERN
- Department
- CERN Computing Seminar,2005
- Speaker
- Sebastian Lopienski
- Year
- 2005
- Language
- English
- Subjects
- Computer science
- Source
- CERN
- Licence
- CERN, as CERN states it. CERN's terms
- Attribution
- © CERN. CERN provides its audiovisual media free of charge for educational and informational use, credited to CERN; this lecture is shown in CERN's own player.
- Who can watch
- CERN gives no rating. Invisible Network shows it to Tweens profiles and older, judged from what the source says about it. How courses are placed