Eugene Spafford, The Challenge of Secure Software

Despite decades of advances in computer science and software engineering, our computing systems seem to be less and less trustworthy. Each week seems to bring new stories of computer viruses, invasions of privacy, serious bugs in common software platforms, and network intrusions. The trend seems to be getting worse instead of better. Why is that? And is there hope for safer systems for day-to-day use in e-commerce and government? In this talk, we will examine some of the factors that have led to this distressing state of events. Included will be a discussion of some rules for designing secure software, and an examination of why the current Internet marketplace encourages those rules to be ignored. The clear solution is not one of technology -- but of consumer action. Audience feedback is encouraged. About the speaker: Dr. Eugene Spafford is a Distinguished Professor with an appointment in Computer Science at Purdue University, where he has served on the faculty since 1987. He is also a professor of Philosophy (courtesy), a professor of Communication (courtesy), a professor of Electrical and Computer Engineering (courtesy), a professor of Nuclear Engineering (courtesy), and a Professor of Political Science (courtesy). He serves on several advisory and editorial boards. Spafford's current research interests are primarily in information security, computer crime investigation, and information ethics. He is generally recognized as one of the senior leaders in the field of computing. Spaf (as he is known to his friends, colleagues, and students) is the founder and Executive Director Emeritus of the Purdue CERIAS (Center for Education and Research in Information Assurance and Security). He was the founder and director of the (superseded) COAST Laboratory.