Overview
Explore a panel discussion on the Secure Software Development Framework, featuring experts from NIST, SAFECode, and BSA. Delve into industry-wide practices for mitigating software vulnerabilities in regulated sectors, examining the new NIST document that bridges the gap between software producers and consumers. Gain insights on international policies, sector-specific regulations, and mandates while addressing organizational challenges, open source considerations, and the BSA Framework for Secure Software. Analyze metrics, business models, lifecycle management costs, and the shift from waterfall approaches to Software as a Service. Investigate the role of AI in software development, including adversarial AI, and learn about valuable resources for implementing secure software practices across various industries.
Syllabus
Introduction
BSA
NIST
Organizational Challenges
Regulatory Policies
One Size Doesnt Fit All
Open Source
BSA Framework for Secure Software
Metrics
Business Models
Lifecycle Management Costs
The Experience
The Value Proposition
Waterfall Approach
Software as a Service
Cost Models
ASP 853
Resources
Feedback
AI in Software Development
adversarial AI
Taught by
RSA Conference