Quality Assurance SIG Cost: Free

This presentation will describe product security evaluation in the context of the Security Development Lifecycle (SDL), a technology-independent four-stage procedure that helps find and mitigate security breaches before product release. The talk will give the audience an understanding of how the different SDL activities such as threat modeling, secure coding and penetration testing, fit into the SDL framework to enhance product security.

Topics covered SDL Checkpoints, HazOp Analysis, Code Reviews, Testing scenarios, Static analysis tools, Testing tools, SeCoE, H/w sec. testing, Security Requirements, CAPEC

Speakers: Burzin Daruwala, Lead Security Evaluator, DEG Security Center of Excellence Salvador Mandujano, Technical Lead, DEG Security Center of Excellence