撰稿人：刘杰容
题目: Software Security: On Secure Software Development and Deployment
时间: 2019年7月23日（星期二）下午4:00-5:30
地点: 广州大学行政西前座428会议室
报告人: 美国阿肯色州立大学（Arkansas State University, USA）Hai Jiang教授
内容简介
As the importance of data and information security has been widely accepted in computer world, software security is essential as well. However, how to train programmers to write secure code and ensure software security is unclear in computer science education. This talk intends to address software security in both temporal and spatial aspects. Security consideration is integrated into the traditional Software Development Life Cycle (SDLC) and turns it into Secure Software Development Lifecycle (SSDL). Security has to be addressed during software development and deployment phases, including security policy/regulations, security requirements, Security architecture and design, secure coding, security testing, determining exploitability, and secure application deployment. Major software security strategies such as threat modeling, static analysis, control flow integrity, and penetration testing are covered as well. The main purpose of this talk is to point out that security is a property rather than an attribute of software. It should not be handled by applying related patches as done in current software industry. Software developers have to keep security in mind all the time with some proposed secure software development mechanisms.
报告人简介
Professor Hai Jiang received his B.S. degree from Beijing University of Posts and Telecommunications, China, M.A. and Ph.D. degrees from Wayne State University, Detroit, MI, USA. He is a Professor in the Department of Computer Science at Arkansas State University, USA. Before joining Arkansas State University, he has spent four years in State key Laboratory of Switching Technology and Telecommunication Networks, Beijing, China as a research fellow and five years in industry with Ford Motor Company, Dearborn, MI, USA, where he held various technical positions. His current research interests include Parallel & Distributed Systems, Cloud Computing, Big Data, Cryptography, Computer & Network Security, High Performance Computing and Communication, and Modeling & Simulation.
Dr. Jiang is a professional member of ACM and IEEE computer society. He has published three books and more than 100 papers in refereed journals, conference proceedings and book chapters. He has been involved in more than 100 conferences and workshops as a program/workshop chair or as a program committee member. He serves as an editor for International Journal of High Performance Computing and Networking, International Journal of Computational Science and Engineering, and International Journal of Embedded Systems as well as a guest editor for IEEE Systems Journal, Cluster Computing, and Concurrency and Computation: Practice and Experience. He also serves on the editorial board of International Journal of Big Data Intelligence, GSTF Journal on Social Computing, Open Journal of Internet of Things, and The Scientific World Journal. He also chaired IEEE TCSC PhD Dissertation Award Selection Committee, 2017-2019.
