DIMACS Workshop on Software Security

Organizers:: Gary McGraw, Cigital, gem@cigital.com; Ed Felten, Princeton University, felten@cs.princeton.edu; Virgil Gligor, University of Maryland, gligor@umd.edu; Dave Wagner, University of California at Berkeley, daw@cs.berkeley.edu
Invited Speakers:: Michael Howard, Microsoft, The Microsoft Trustworthy Computing Initiative from the Inside; Brian Kernighan, Coding Excellence: Security as a Side Effect of Good Software; Dan Geer, @stake, Software Security in the Big Picture: Repeating ourselves all over again

Time	Agenda item
8:00-9:00	Breakfast (DIMACS)
9:00-10:00	Gary McGraw, Cigital (Author of Building Secure Software) The Art and Science of Software Security
10:00-10:30	Group discussion
10:30-10:45	Morning break
10:45-12:00	Outrageous Opinions (to be submitted by attendees); Examples to spark ideas: The TCPA is good for everyone Capabilities are the only way to go Open source is a security panacea Security does not matter to users at all …
12:00-1:30	Lunch (DIMACS)
1:30-2:00	Breakout session Administration Groups, group leaders, goals for sessions
2:00-3:00	Invited talk: Michael Howard, Microsoft (Author of Writing Secure Code) The Microsoft Trustworthy Computing Initiative from the Inside
3:00-3:30	Group discussion
3:30-4:00	Break
4:00-5:00	BREAKOUT: Security Engineering Requirements Architecture and design Coding and Testing Manageability	BREAKOUT: On Architecture and Implementation Design risks Implementation risks Technology Tradeoffs Experience and expertise
5:00-7:30	Dinner (on your own)
7:30-10:00	Wine and cheese reception and poster session

Time	Agenda item
8:00-9:00	Breakfast (DIMACS)
9:00-10:00	Invited talk: Brian Kernighan Coding Excellence: Security as a Side Effect of Good Software
10:00-10:30	Group discussion
10:30-10:45	Morning break
10:45-12:00	BREAKOUT: Security Analysis Role of expertise Auditing design Auditing code Security Testing	BREAKOUT: Mobile code and Malicious Code .NET and Java Web services Modern malicious code
12:00-1:30	Lunch (DIMACS)
1:30-2:30	Invited talk: Dan Geer, @stake Software Security in the Big Picture: Repeating ourselves all over again
2:30-3:30	BREAKOUT: Open Research Issues Hard problems	BREAKOUT: Education and Training Academia Industry developers
3:30-4:00	Break
4:00-5:30	Workshop wrap-up Reports from breakout sessions Program committee summary

Document last modified on October 11, 2002.
Contact the Center