Software Security: Building Security In Gary McGraw
Publisher: Addison-Wesley Professional

When it comes to security, we have two options: We can build our systems to be as secure as possible from eavesdropping, or we can deliberately weaken their security. But with an increasing number of Building an Enterprise IT Security Training Program. The Building Security In Maturity Model (BSIMM) is a good framework to follow for secure software development. On the other hand, regulators don't make it easy do patching. We have to choose one or the other. This is an old debate, and one we've been through many times. At an electronics design conference this week researchers said IT security for all sorts of medical equipment is disgraceful - Page 1. To address this, high-quality security building blocks (e.g., cryptographic components) are necessary, but insufficient. @W The chance is pretty low, but if it fails all of the hardware and software depending on its security is instantly obsolete, so the overall risk is unacceptably high. The fist talk, “Software Security and the Building Security in Maturity Model (BSIMM)” will be presented in Engineering Building 1, Room 1007 from 10:40 -11:30 a.m. One problem, apparently, is that institutions are timid about letting anyone touch the software of what are admittedly sensitive machines.