Software developers must meet many kinds of requirements: functionality, performance, ease of use, size, reusability and more. In most cases, the requirements state what the software should do. However, computer security requirements are phrased differently, saying that the software should do exactly what is stated but do nothing more. The nothing more condition is difficult to handle. It is hard to write testable requirements for and nothing more, ensure that your design and code do nothing more, and guarantee through testing and maintenance that the original code and fixes do nothing more. In this talk, Dr. Pfleeger will address how security needs affect development, how projects can fail to achieve adequate security, and how security professionals have an essential role in software development.

Biography

Charles P. Pfleeger is principal consultant at Trusted Information Systems in Glenwood, Maryland. He specializes in helping organizations assess their computer security needs, and in designing policies and procedures for secure systems. From 1992 to 1995, Dr. Pfleeger was head of European Operations for TIS. From 1974 to 1988, he was a professor in the computer science department at the University of Tennessee. In 1985, he created and headed the first Tennessee Governor's School for the Sciences, an intensive summer program for the state's top science students. Pfleeger is the author of three textbooks, including the new edition of the best-selling Security in Computing (Prentice Hall, 1996). Dr. Pfleeger is the vice-chair of the IEEE Technical Committee on Security and Privacy.

CREST home page	News	Research	Seminar Series	Publications	Feedback