Formal Verification of Secure Software Systems
Explore formal verification techniques for secure software systems in this conference talk from the Central Ohio InfoSec Summit 2016. Learn how to build an effective Software Security Group (SSG) that integrates seamlessly with development teams. Discover the importance of aligning objectives, fostering mutual respect, and creating healthy tension to address real issues. Understand why hiring solid developers and training them in security is more effective than the reverse. Delve into threat modeling, finding creative solutions, and understanding business impact and risk. See how high-functioning SSGs become an integral part of the development process, leading to faster software shipping, increased automation, and genuine collaboration. Gain insights on making security an inherent part of the product development lifecycle.