Seven Security lessons
Carl E. Landwehr
Program Director of the Cyber Trust Program, National Science Foundation
Presented by: Milestones in Computer Science Distinguished Lecture Series
March 4, 2005
11 a.m. - 12 noon
Salisbury Labs Kinnicutt Lecture Hall
Abstract
Seven seemingly contradictory lessons about the design and implementation of technical security measures, drawn from a career in computer and network security research and development, will be presented. Topics touched on will range from formal models for secure military operating systems through special purpose security devices to make commercial-of-the-shelf systems usable in high assurance environments.
Biography
Carl Landwehr leads the Cyber Trust program at the National Science Foundation in the Computer and Information Science and Engineering (CISE)directorate. Cyber Trust was CISE-wide emphasis area to be developed following the recent CISE reorganization. Dr. Landwehr is on assignment from the University of Maryland's Institute for Systems Research, where he is a Senior Research Scientist. For many years he conducted research in security flaw taxonomies, secure message systems, and security gadgets at the Naval Research Laboratory, and he served as a Senior Fellow at Mitretek systems, advising DARPA program managers on information assurance and survivability programs. He has served on the computer science faculty at Purdue University, and he has taught courses on topics in computer science and information security at Georgetown, the University of Maryland, and Virginia Tech. He received a Bachelor of Science degree in Engineering and Applied Science from Yale University and M.S. and Ph.D. degrees in Computer and Communication Sciences from the University of Michigan.
Dr. Landwehr is Associate Editor-in-Chief of IEEE Security and Privacy magazine, Associate Editor of IEEE Transactions on Dependable and Secure Computing, and chairs the Information Security Research Council. He has also served on the editorial boards of IEEE Transactions on Software Engineering, the Journal of Computer Security, and the High Integrity Systems Journal. He was the founding chair of IFIP Working Group 11.3 on Database Security, and has also chaired the IEEE Technical Committee on Security and Privacy. IFIP has awarded him its Silver Core, and the IEEE Computer Society has awarded him its Golden Core. His current research interests span many aspects of trustworthy computing, including high assurance software development, understanding software flaws and vulnerabilities, token-based authentication, system evaluation and certification methods, multilevel security, and architectures for intrusion tolerant systems.
Host
Fernando C. Colon Osorio
Refreshments will be served.
Last modified: September 25, 2006 14:03:05