Updating Risk Assessment In The CERT Secure Coding Standard Software Engineering Institute (SEI) Podcast Series podcast

Content provided by Carnegie Mellon University Software Engineering Institute and Members of Technical Staff at the Software Engineering Institute. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Carnegie Mellon University Software Engineering Institute and Members of Technical Staff at the Software Engineering Institute or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://player.fm/legal.

Software Engineering Institute (SEI) Podcast Series »
Updating Risk Assessment in the CERT Secure Coding Standard

10d ago 35:53

MP3•Episode home

Bringing a codebase into compliance with the SEI CERT Coding Standards, requires a cost of time and effort, namely in the form of a static analysis tool. But those who are familiar with static analysis tools know that the alerts are not always reliable and produce false positives that must be detected and disregarded. This year, we plan on making some exciting updates to the SEI CERT C Coding Standard to better harmonize with the current state of the art for static analysis tools, as well as simplify the process of source code security auditing. In this podcast David Svoboda and Joseph Sible, both engineers in CERT’s Applied Systems Group and primary developers and maintainers of the standard, sit down with Robert Schiela, deputy technical director of the Cybersecurity Foundations team in CERT, to discuss the proposed changes, specifically in the area of risk assessment.

412 episodes

#Engineering #Business #Science #Tech #Artificialintelligenceengineering #Cybersecurity #Futuretech #Softwareengineering #Carnegie Mellon University Software Engineering Institute #Members of Technical Staff at the Software Engineering Institute #Industries