Get a sneak peak of Gary McGraws RSA Conference 2015 talk. In his talk Gary will outline the common mistakes in software architecture design that increase security risk and share simple ways to avoid them.

1. SESSION ID:
#RSAC
Gary McGraw, Ph.D.
Sneak Peek:
How to Avoid the Top Ten Software
Security Flaws
ASD-T09
Chief Technology Officer
Cigital
@cigitalgem

2. #RSAC
@cigitalgem
1. Earn or give, but never
assume, trust

3. #RSAC
@cigitalgem2. Use an authentication
mechanism that can’t be
bypassed

4. #RSAC
@cigitalgem
3. Authorize after you
authenticate

5. #RSAC
@cigitalgem
4. Strictly separate data and
control instructions, and
never process control
instructions from untrusted
sources

6. #RSAC
@cigitalgem5. Define an approach that
ensures all data are
explicitly validated

7. #RSAC
@cigitalgem
6. Use cryptography
correctly

8. #RSAC
@cigitalgem
7. Identify sensitive data and
how they should be handled

9. #RSAC
@cigitalgem
8. Always consider the users

10. #RSAC
@cigitalgem
9. Understand how
integrating external
components changes your
attack surface

11. #RSAC
@cigitalgem10. Be flexible when
considering future changes
to objects and actors

12. #RSAC
@cigitalgem
Get the full story at RSA
Tuesday, April 21, 3:30 PM – 4:20 PM
Add to your calendar.

13. #RSAC
@cigitalgem
SearchSecurity + Silver Bullet
www.cigital.com/~gem/writing
No-nonsense monthly security
column by Gary McGraw
www.cigital.com/silverbullet