Theater #1: Secure by Design Next Steps

Description

Despite decades of advancements in technology, our software systems remain shockingly vulnerable.  Domestic and foreign entities are increasingly exploiting the poor security of our systems.  Ransomware attacks are impacting companies and shutting down schools, hospitals, and government agencies. Many of these weaknesses stem from poor coding choices and default settings put in place by software developers and vendors. Even though there are multiple reasons for security weaknesses in our nation’s infrastructure (e.g., lack of sound policies, configuration errors, poor incident response), little progress has been made in software development. The White House’s National Cyber Director recently distributed a document that advertises to be “A path toward secure and measurable software”. In addition, the Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA) has launched an initiative called ‘Secure by Design’.  This presentation by AFCEA’s Cyber Committee, highlights the findings documented in a recent paper and provides an analysis of the successes and failures that have led to the current situation.  The successes offer, the Committee believes, insight into the necessary approach to fix the problem.  The failures are examined to help identify additional actions that must accompany any such effort.  

Cyber Committee Secure by Design paper

Listen Here

Tracks:

• 
  Acquisition Session
• 
  Continuing Education
• 
  Theater 1
• 
  Theater Sessions