Speakers: Jon R. Kibler Chief Technical Officer Advanced Systems Engineering Technology, Inc. Mike Cooper Senior Security Engineer, IPC Systems Hack the Textbook: Introducing The Textbook Security Project Why do we have so many software security problems? Clearly, a large proportion are caused by poorly written code. Why is our code so badly written? There are many reasons, not the least of which is that writing secure code can be a difficult task. However, the problem is compounded by most programmers having been taught insecure coding practices. The majority of the most popular and widely used college textbooks for programming never cover any security concepts. Worse, they actually teach practices that result in insecure code. For some time now, companies trying to produce secure software have been complaining that college courses and course materials fail to prepare students to write secure code, and they are tired of having to retrain recent graduates in secure programming practices. The insecure code problem is compounded by the fact that many of the professors and instructors who teach programming are not security experts. Even if they could identify and correct the “security bugs” in textbooks, it is difficult for them to teach what is not in the textbooks or to try to teach differently from the textbooks. Attempts by some in the academic community to get authors and publishers to include security content in textbooks has actually been met with resistance. Many in … http://www.youtube.com/v/YNaVIo7QXyY?f=videosapp=youtube_gdata
Excerpt from:
DEFCON 17: Hack The Textbook
Category: Computer Hacking, Penetration Testing, Videos Library